Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233961 4.3 警告 The PHP Group - PHP の substr_count 関数における重要な情報を取得される脆弱性 - CVE-2007-2748 2012-09-25 16:47 2007-05-17 Show GitHub Exploit DB Packet Storm
233962 7.5 危険 labs.beffa.org - labs.beffa.org w2box における任意の PHP コードをアップロードされる脆弱性 - CVE-2007-2742 2012-09-25 16:47 2007-05-17 Show GitHub Exploit DB Packet Storm
233963 9.3 危険 Little CMS - Little CMS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-2741 2012-09-25 16:47 2007-05-17 Show GitHub Exploit DB Packet Storm
233964 6 警告 jetbox - Jetbox CMS における任意のスクリプトをアップロードされる脆弱性 - CVE-2007-2733 2012-09-25 16:47 2007-05-16 Show GitHub Exploit DB Packet Storm
233965 6.8 警告 jetbox - Jetbox CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2732 2012-09-25 16:47 2007-05-16 Show GitHub Exploit DB Packet Storm
233966 4 警告 jetbox - Jetbox CMS の formmail.php における CRLF インジェクションの脆弱性 - CVE-2007-2731 2012-09-25 16:47 2007-05-16 Show GitHub Exploit DB Packet Storm
233967 4.3 警告 The PHP Group - PHP の soap エクステンションにおける脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-2728 2012-09-25 16:47 2007-05-16 Show GitHub Exploit DB Packet Storm
233968 2.6 注意 The PHP Group - PHP の ext/mcrypt/mcyrpt.c における特定のデータを解読される脆弱性 - CVE-2007-2727 2012-09-25 16:47 2007-05-16 Show GitHub Exploit DB Packet Storm
233969 7.1 危険 media player classic - Media Player Classic におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2723 2012-09-25 16:47 2007-05-16 Show GitHub Exploit DB Packet Storm
233970 7.8 危険 newzcrawler - NewzCrawler におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2722 2012-09-25 16:47 2007-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285131 - axis 207w_camera The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by lev… CWE-310
Cryptographic Issues
CVE-2007-4926 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285132 - axis 207w_network_camera axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reboot) via many requests with unique buffer names in the buffername parameter in a… CWE-20
 Improper Input Validation 
CVE-2007-4927 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285133 - axis 207w_network_camera The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information. CWE-310
Cryptographic Issues
CVE-2007-4928 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285134 - axis 207w_network_camera Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/image_incl.shtml, and other u… CWE-79
Cross-site Scripting
CVE-2007-4929 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285135 - axis 207w_network_camera Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via (1) axis-cgi/admin/restart.cgi, (2) the user… CWE-352
 Origin Validation Error
CVE-2007-4930 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285136 - comscripts cs_guestbook CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for ba… CWE-264
Permissions, Privileges, and Access Controls
CVE-2007-4937 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285137 - mplayer
sgi
mplayer
irix
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-4938 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285138 - guliverkli
mympc
verycd
media_player_classic
cd-storm
stormplayer
Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-4939 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285139 - guliverkli
mympc
verycd
media_player_classic
cd-storm
stormplayer
Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote atta… CWE-189
Numeric Errors
CVE-2007-4940 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm
285140 - kde kmplayer KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values. CWE-399
 Resource Management Errors
CVE-2007-4941 2018-10-16 06:38 2007-09-19 Show GitHub Exploit DB Packet Storm