Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233741 2.1 注意 NetBSD - NetBSD の display driver allocattr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-3654 2012-09-25 16:47 2007-09-17 Show GitHub Exploit DB Packet Storm
233742 6.8 警告 ヒューレット・パッカード - HP Digital Imaging の hpqvwocx.dll における絶対パストラバーサルの脆弱性 - CVE-2007-3649 2012-09-25 16:47 2007-07-10 Show GitHub Exploit DB Packet Storm
233743 7.8 危険 Linux - Linux kernel の net/netfilter/nf_conntrack_h323_asn1.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2007-3642 2012-09-25 16:47 2007-07-9 Show GitHub Exploit DB Packet Storm
233744 7.5 危険 mkportal - MKPortal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3637 2012-09-25 16:47 2007-07-9 Show GitHub Exploit DB Packet Storm
233745 6.8 警告 LimeSurvey - LimeSurvey における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3632 2012-09-25 16:47 2007-07-9 Show GitHub Exploit DB Packet Storm
233746 10 危険 levent veysi portal - Levent Veysi Portal の oku.asp における SQL インジェクションの脆弱性 - CVE-2007-3629 2012-09-25 16:47 2007-07-9 Show GitHub Exploit DB Packet Storm
233747 5 警告 PEAR - PEAR Structures-DataGrid-DataSource-MDB2 の MDB2.php における "生成されたソートクエリを操作される" 脆弱性 - CVE-2007-3628 2012-09-25 16:47 2007-07-9 Show GitHub Exploit DB Packet Storm
233748 7.5 危険 php lite - PHP Lite Calendar Express における SQL インジェクションの脆弱性 - CVE-2007-3627 2012-09-25 16:47 2007-07-9 Show GitHub Exploit DB Packet Storm
233749 7.8 危険 日立 - Hitachi TPBroker の ADM デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-3626 2012-09-25 16:47 2007-07-6 Show GitHub Exploit DB Packet Storm
233750 4.3 警告 日立 - Hitachi JP1/HiCommand Device Manager におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3623 2012-09-25 16:47 2007-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284201 - iss blackice_pc_protection ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.tx… NVD-CWE-Other
CVE-2006-7129 2018-10-17 01:29 2007-03-6 Show GitHub Exploit DB Packet Storm
284202 - jinzora jinzora PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter,… CWE-94
Code Injection
CVE-2006-7130 2018-10-17 01:29 2007-03-6 Show GitHub Exploit DB Packet Storm
284203 - jinzora jinzora PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web_root parameter. NVD-CWE-Other
CVE-2006-7131 2018-10-17 01:29 2007-03-6 Show GitHub Exploit DB Packet Storm
284204 - tiny_portal tiny_portal Cross-site scripting (XSS) vulnerability in TinyPortal before 0.8.6 allows remote attackers to inject arbitrary web script or HTML via the shoutbox. NVD-CWE-Other
CVE-2006-7137 2018-10-17 01:29 2007-03-7 Show GitHub Exploit DB Packet Storm
284205 - oracle apex SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modi… CWE-89
SQL Injection
CVE-2006-7138 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284206 - oracle apex This vulnerability is addressed in the following product patch: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html CWE-89
SQL Injection
CVE-2006-7138 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284207 - kde k-mail Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a… CWE-20
 Improper Input Validation 
CVE-2006-7139 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284208 - call-center-software call-center-software Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field. NVD-CWE-Other
CVE-2006-7143 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284209 - call-center-software call-center-software SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page. NVD-CWE-Other
CVE-2006-7144 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284210 - call-center-software call-center-software edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter. NVD-CWE-Other
CVE-2006-7145 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm