Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239961 7.1 危険 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2671 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
239962 7.6 危険 Don Ho
scintilla		 - notepad++ で使用される Scintilla の LexRuby.cxx におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2666 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
239963 7.5 危険 php firstpost - PhpFirstPost の block.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2665 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
239964 3.5 注意 MySQL AB - MySQL におけるパーティションで区切られたテーブルから重要な情報を取得される脆弱性 - CVE-2007-2693 2012-09-25 16:47 2006-10-26 Show GitHub Exploit DB Packet Storm
239965 7.8 危険 idautomation - IDAutomationLinear6.dll の ID Automation Linear Barcode ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2658 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
239966 7.8 危険 ヒューレット・パッカード - hpqvwocx.dll におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2656 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
239967 7.5 危険 Netwin Ltd - SurgeMail の NetWin Webmail におけるリモートコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2007-2655 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
239968 6.5 警告 monalbum - Monalbum の admin/admin_configuration.php における PHP コードを挿入される脆弱性 - CVE-2007-2647 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
239969 9.4 危険 morovia - Morovia Barcode ActiveX Professional における任意のファイルを上書きされる脆弱性 - CVE-2007-2644 2012-09-25 16:47 2007-05-13 Show GitHub Exploit DB Packet Storm
239970 7.8 危険 heiko stamer - LibTMCG におけるプライベートカードに関する重要な情報を取得される脆弱性 - CVE-2007-2640 2012-09-25 16:47 2007-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285041 - zeromq zeromq libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors. NVD-CWE-noinfo
CVE-2014-7203 2024-11-21 11:16 2014-10-9 Show GitHub Exploit DB Packet Storm
285042 - zeromq zeromq stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. NVD-CWE-noinfo
CVE-2014-7202 2024-11-21 11:16 2014-10-9 Show GitHub Exploit DB Packet Storm
285043 - bassmaster_project bassmaster Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitra… CWE-94
Code Injection 		CVE-2014-7205 2024-11-21 11:16 2014-10-9 Show GitHub Exploit DB Packet Storm
285044 - python
apple 		python
mac_os_x 		Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function. CWE-189
Numeric Errors 		CVE-2014-7185 2024-11-21 11:16 2014-10-9 Show GitHub Exploit DB Packet Storm
285045 - arubanetworks arubaos Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain … NVD-CWE-noinfo
CVE-2014-7299 2024-11-21 11:16 2014-10-8 Show GitHub Exploit DB Packet Storm
285046 - getmail getmail The POP3-over-SSL implementation in getmail 4.0.0 through 4.44.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof POP3 servers and obtain sensiti… CWE-310
Cryptographic Issues 		CVE-2014-7275 2024-11-21 11:16 2014-10-8 Show GitHub Exploit DB Packet Storm
285047 - getmail getmail The IMAP-over-SSL implementation in getmail 4.44.0 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in… CWE-310
Cryptographic Issues 		CVE-2014-7274 2024-11-21 11:16 2014-10-8 Show GitHub Exploit DB Packet Storm
285048 - getmail getmail The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensiti… CWE-310
Cryptographic Issues 		CVE-2014-7273 2024-11-21 11:16 2014-10-8 Show GitHub Exploit DB Packet Storm
285049 - mediawiki mediawiki The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripti… CWE-79
Cross-site Scripting 		CVE-2014-7295 2024-11-21 11:16 2014-10-7 Show GitHub Exploit DB Packet Storm
285050 - freepbx
sangoma 		freepbx htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary c… CWE-94
Code Injection 		CVE-2014-7235 2024-11-21 11:16 2014-10-7 Show GitHub Exploit DB Packet Storm