Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241081 10 危険 e-commerce solutions - E-Commerce Scripts Shopping Cart Script の admin.aspx における SQL インジェクションの脆弱性 - CVE-2007-4121 2012-06-26 15:54 2007-08-1 Show GitHub Exploit DB Packet Storm
241082 7.5 危険 berthanas ziyaretci - Berthanas Ziyaretci Defteri 2.0 の yonetici.asp における SQL インジェクションの脆弱性 - CVE-2007-4119 2012-06-26 15:54 2007-08-1 Show GitHub Exploit DB Packet Storm
241083 3.5 注意 awbs - AWBS における他の専用サーバの設定データを取得される脆弱性 - CVE-2007-4113 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
241084 6.8 警告 awbs - AWBS における SQL インジェクションの脆弱性 - CVE-2007-4112 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
241085 6.8 警告 codewidgets - Real Estate listing website アプリケーションテンプレートのログインスクリプトにおける SQL インジェクションの脆弱性 - CVE-2007-4111 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
241086 7.5 危険 codewidgets - Message Board / Threaded Discussion Forum Application Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4110 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
241087 7.5 危険 codewidgets - Online Store Application Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4109 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
241088 7.5 危険 codewidgets - Online Event Registration Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4108 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
241089 6.8 警告 codewidgets - CodeWidgets Pay Roll - Time Sheet and Punch Card Application における SQL インジェクションの脆弱性 - CVE-2007-4106 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
241090 9.3 危険 Baidu, Inc. - Baidu Soba Search Bar の BaiduBar.dll の特定の ActiveX コントロールにおける任意のコードを実行される脆弱性 - CVE-2007-4105 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288641 - kde kde KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing t… NVD-CWE-Other
CVE-1999-1270 2017-12-19 11:29 1998-07-11 Show GitHub Exploit DB Packet Storm
288642 - macromedia dreamweaver Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users. NVD-CWE-Other
CVE-1999-1271 2017-12-19 11:29 1998-06-11 Show GitHub Exploit DB Packet Storm
288643 - sgi irix Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. NVD-CWE-Other
CVE-1999-1272 2017-12-19 11:29 1998-03-1 Show GitHub Exploit DB Packet Storm
288644 - national_science_foundation squid_web_proxy Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. NVD-CWE-Other
CVE-1999-1273 2017-12-19 11:29 1998-02-20 Show GitHub Exploit DB Packet Storm
288645 - ipass roamserver iPass RoamServer 3.1 creates temporary files with world-writable permissions. NVD-CWE-Other
CVE-1999-1274 2017-12-19 11:29 1997-12-29 Show GitHub Exploit DB Packet Storm
288646 - ibm lotus_cc_mail Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges. NVD-CWE-Other
CVE-1999-1275 2017-12-19 11:29 1997-09-8 Show GitHub Exploit DB Packet Storm
288647 - backweb_technologies backweb_client BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password. NVD-CWE-Other
CVE-1999-1277 2017-12-19 11:29 1998-12-24 Show GitHub Exploit DB Packet Storm
288648 - nlog nlog nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl. NVD-CWE-Other
CVE-1999-1278 2017-12-19 11:29 1998-12-25 Show GitHub Exploit DB Packet Storm
288649 - hummingbird exceed Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file. NVD-CWE-Other
CVE-1999-1280 2017-12-19 11:29 1998-12-3 Show GitHub Exploit DB Packet Storm
288650 - winddance_networks_corporation breeze_network_server Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program. NVD-CWE-Other
CVE-1999-1281 2017-12-19 11:29 1998-12-26 Show GitHub Exploit DB Packet Storm