Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240891 7.5 危険 chupix - Chupix CMS の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4957 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240892 9.3 危険 baofeng - Baofeng Storm の sparser.dll の 特定の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4943 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240893 7.5 危険 focus-sis - Focus/SIS の modules/Discipline/StudentFieldBreakdown.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4942 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240894 5 警告 comscripts - CS Guestbook における admin 名および MD5 パスワードハッシュを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4937 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240895 4.3 警告 アクシスコミュニケーションズ - AXIS カメラ におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-4930 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240896 4.3 警告 アクシスコミュニケーションズ - AXIS カメラにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4929 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240897 4.9 警告 アクシスコミュニケーションズ - AXIS カメラにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2007-4928 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240898 3.5 注意 アクシスコミュニケーションズ - AXIS カメラの axis-cgi/buffer/command.cgi におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4927 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240899 9.3 危険 アクシスコミュニケーションズ - AXIS カメラにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2007-4926 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
240900 7.5 危険 ewire - ePC の ewirepcfunctions.php の ewirePC_Decrypt 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4925 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
272991 - apache tomcat Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as… CWE-200
Information Exposure 		CVE-2007-3382 2023-11-7 11:00 2007-08-15 Show GitHub Exploit DB Packet Storm
272992 - apache tomcat Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive in… CWE-200
Information Exposure 		CVE-2007-3385 2023-11-7 11:00 2007-08-15 Show GitHub Exploit DB Packet Storm
272993 - mozilla firefox
seamonkey
thunderbird 		Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with… NVD-CWE-noinfo
CVE-2007-3845 2023-11-7 11:00 2007-08-8 Show GitHub Exploit DB Packet Storm
272994 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2000-1205. Reason: This candidate is a duplicate of CVE-2000-1205. Notes: All CVE users should reference CVE-2000-1205 instead of… - CVE-2007-4049 2023-11-7 11:00 2007-07-31 Show GitHub Exploit DB Packet Storm
272995 - - - Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterize… - CVE-2007-4044 2023-11-7 11:00 2007-07-28 Show GitHub Exploit DB Packet Storm
272996 - linux linux_kernel Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setti… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-3105 2023-11-7 11:00 2007-07-28 Show GitHub Exploit DB Packet Storm
272997 - libvorbis libvorbis lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_… CWE-399
 Resource Management Errors 		CVE-2007-3106 2023-11-7 11:00 2007-07-27 Show GitHub Exploit DB Packet Storm
272998 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-0011. Reason: This candidate is a duplicate of CVE-2007-0011. Notes: All CVE users should reference CVE-2007-0011 instead of… - CVE-2007-4015 2023-11-7 11:00 2007-07-26 Show GitHub Exploit DB Packet Storm
272999 - apache tomcat Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remot… NVD-CWE-Other
CVE-2007-3383 2023-11-7 11:00 2007-07-26 Show GitHub Exploit DB Packet Storm
273000 - panda panda_antivirus Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around." NVD-CWE-Other
CVE-2007-3969 2023-11-7 11:00 2007-07-26 Show GitHub Exploit DB Packet Storm