Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241661 4.3 警告 big blue - Big Blue Guestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2203 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241662 6.8 警告 acvsws - ACVSWS_PHP5 の inc_ACVS/SOAP/Transport.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2202 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241663 6.8 警告 cjg explorer pro
phpsitebackup
nx
Joomla!		 - Joomla! などの製品で使用される Vincent Blavet PhpConcept Library 用 PclTar モジュール の lib/pcltar.lib.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2199 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241664 5 警告 brettle development - NeatUpload ASP.NET における他のクライアントの HTTP レスポンスを取得される脆弱性 - CVE-2007-2197 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241665 5 警告 alvaro - aMSN におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2195 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241666 10 危険 Gentoo Linux - XnView におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2194 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241667 9.3 危険 ACD Systems International - ACDSee の ID_X.apl プラグインにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2193 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241668 9.3 危険 antonio da cruz - Photofiltre Studio におけるバッファオーバーフローの脆弱性 - CVE-2007-2192 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241669 6.8 警告 FreePBX - freePBX におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2191 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
241670 6.8 警告 eba news - Eba News の admin/public/webpages.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2190 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279141 - bea weblogic_server Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP heade… CWE-399
 Resource Management Errors 		CVE-2007-4618 2018-10-26 23:02 2007-08-31 Show GitHub Exploit DB Packet Storm
279142 - bea weblogic_server SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle a… CWE-310
Cryptographic Issues 		CVE-2007-4613 2018-10-26 23:01 2007-08-31 Show GitHub Exploit DB Packet Storm
279143 - opensymphony xwork Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression… NVD-CWE-Other
CVE-2007-4556 2018-10-26 23:00 2007-08-28 Show GitHub Exploit DB Packet Storm
279144 - php php The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as d… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-3997 2018-10-26 22:59 2007-09-5 Show GitHub Exploit DB Packet Storm
279145 - php
debian
canonical 		php
debian_linux
ubuntu_linux 		The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error … CWE-20
 Improper Input Validation  		CVE-2007-3998 2018-10-26 22:59 2007-09-5 Show GitHub Exploit DB Packet Storm
279146 - apple
microsoft 		mac_os_x
windows_vista
windows_xp 		Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untrusted Java applets that gain privileges via unspecified vectors. NVD-CWE-noinfo
CVE-2007-3751 2018-10-26 22:58 2007-11-8 Show GitHub Exploit DB Packet Storm
279147 - oracle jdk The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary we… CWE-79
Cross-site Scripting 		CVE-2007-3503 2018-10-26 22:56 2007-06-30 Show GitHub Exploit DB Packet Storm
279148 - php php The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375. CWE-200
Information Exposure 		CVE-2007-2748 2018-10-20 04:03 2007-05-18 Show GitHub Exploit DB Packet Storm
279149 - linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memo… CWE-189
Numeric Errors 		CVE-2007-2875 2018-10-20 04:03 2007-06-12 Show GitHub Exploit DB Packet Storm
279150 - apple mac_os_x Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the A… CWE-287
Improper Authentication 		CVE-2007-3184 2018-10-20 04:03 2007-06-13 Show GitHub Exploit DB Packet Storm