Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241611 9 危険 don moore - MyDNS におけるバッファオーバーフローの脆弱性 - CVE-2007-2362 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
241612 5 警告 Apache Software Foundation - Apache Axi における重要情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-2353 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
241613 10 危険 afflib - AFFLIB におけるフォーマットストリングの脆弱性 - CVE-2007-2352 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
241614 6.5 警告 FreePBX - freePBX の music-on-hold モジュールの admin/config.php におけるコマンドを実行される脆弱性 - CVE-2007-2350 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
241615 7.5 危険 codewand - CodeWand phpBrowse の include/include_stream.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2345 2012-06-26 15:46 2007-04-27 Show GitHub Exploit DB Packet Storm
241616 7.8 危険 Enterasys Networks - 複数の Enterasys NetSight 製品におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2344 2012-06-26 15:46 2007-04-27 Show GitHub Exploit DB Packet Storm
241617 7.5 危険 Enterasys Networks - 複数の Enterasys NetSight 製品におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2343 2012-06-26 15:46 2007-04-27 Show GitHub Exploit DB Packet Storm
241618 7.5 危険 creascripts - CreaScripts CreaDirectory における SQL インジェクションの脆弱性 - CVE-2007-2342 2012-06-26 15:46 2007-04-27 Show GitHub Exploit DB Packet Storm
241619 7.5 危険 dynatracker - DynaTracker の includes_handler.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2330 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
241620 7.5 危険 goldcoders - HYIP Manager Pro における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2326 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307211 - mimms
xine
mimms
xine-lib
Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arb… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-2200 2011-08-2 13:00 2006-06-28 Show GitHub Exploit DB Packet Storm
307212 - jed_wing chm_lib Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2005-2930 2011-08-2 13:00 2005-10-29 Show GitHub Exploit DB Packet Storm
307213 - freebsd
nrl
freebsd
opie
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to c… CWE-189
Numeric Errors
CVE-2010-1938 2011-07-29 11:37 2010-05-29 Show GitHub Exploit DB Packet Storm
307214 - matthias_graubner mg_help SQL injection vulnerability in the Helpdesk (mg_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-0333 2011-07-26 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm
307215 - francisco_cifuentes vote_for_tt_news Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecif… CWE-79
Cross-site Scripting
CVE-2010-0335 2011-07-26 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm
307216 - lyften com_lyftenbloggie SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter to index… CWE-89
SQL Injection
CVE-2009-4104 2011-07-26 13:00 2009-11-29 Show GitHub Exploit DB Packet Storm
307217 - gallarific gallarific Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) query parameter to (a) search.php; (2) gusername and (3) gpa… CWE-89
SQL Injection
CVE-2008-1464 2011-07-26 13:00 2008-03-25 Show GitHub Exploit DB Packet Storm
307218 - gallarific gallarific More information is available at: http://www.securityfocus.com/bid/28163 CWE-89
SQL Injection
CVE-2008-1464 2011-07-26 13:00 2008-03-25 Show GitHub Exploit DB Packet Storm
307219 - francisco_cifuentes vote_for_tt_news SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-0334 2011-07-25 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm
307220 - symantec ghost_solutions_suite Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute a… CWE-287
Improper Authentication
CVE-2008-0640 2011-07-25 13:00 2008-02-8 Show GitHub Exploit DB Packet Storm