Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241941 6.8 警告 francisco burzi - Francisco Burzi PHP-Nuke の index.php における SQL インジェクションの脆弱性 - CVE-2007-1061 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241942 4.6 警告 Comodo - Comodo Firewall Pro におけるセキュリティ保護を回避される脆弱性 - CVE-2007-1051 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241943 4.3 警告 abledesign - AbleDesign MyCalendar の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1050 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241944 7.5 危険 distributed checksum clearinghouse - DCC における /var/dcc/maps 配下の hosts を削除される脆弱性 - CVE-2007-1047 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241945 5 警告 dem trac - Dem_trac におけるログファイルの内容を読み取られる脆弱性 - CVE-2007-1046 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241946 7.5 危険 ezboo - Ezboo webstats における認証を回避される脆弱性 - CVE-2007-1043 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241947 7.5 危険 Drupal - Drupal 用の Mediafield などのモジュールで使用される getID3 の特定のデモスクリプトにおける任意のファイルを削除される脆弱性 - CVE-2007-1035 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
241948 7.5 危険 Drupal - Drupal 用の Secure site モジュールにおけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2007-1033 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
241949 6.8 警告 barry jaspan - Drupal の Barry Jaspan Image Pager におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1028 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
241950 6.8 警告 cedstat - CedStat の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1020 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288071 - fersch formbankserver Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the Name parameter. NOTE: … NVD-CWE-Other
CVE-2007-0055 2017-10-19 10:29 2007-01-5 Show GitHub Exploit DB Packet Storm
288072 - imgallery imgallery users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts. NVD-CWE-Other
CVE-2007-0082 2017-10-19 10:29 2007-01-5 Show GitHub Exploit DB Packet Storm
288073 - katy_whitton_web_development newscmslite newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCM… NVD-CWE-Other
CVE-2007-0091 2017-10-19 10:29 2007-01-6 Show GitHub Exploit DB Packet Storm
288074 - e-smart_cart e-smart_cart SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter. NVD-CWE-Other
CVE-2007-0092 2017-10-19 10:29 2007-01-6 Show GitHub Exploit DB Packet Storm
288075 - verliadmin verliadmin Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot … NVD-CWE-Other
CVE-2007-0098 2017-10-19 10:29 2007-01-6 Show GitHub Exploit DB Packet Storm
288076 - acunetix web_vulnerability_scanner Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-… NVD-CWE-Other
CVE-2007-0120 2017-10-19 10:29 2007-01-9 Show GitHub Exploit DB Packet Storm
288077 - digiappz digirez SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the book_id parameter. NVD-CWE-Other
CVE-2007-0128 2017-10-19 10:29 2007-01-9 Show GitHub Exploit DB Packet Storm
288078 - locazo locazolist_classifieds SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter. NVD-CWE-Other
CVE-2007-0129 2017-10-19 10:29 2007-01-9 Show GitHub Exploit DB Packet Storm
288079 - aratix aratix PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in t… NVD-CWE-Other
CVE-2007-0135 2017-10-19 10:29 2007-01-9 Show GitHub Exploit DB Packet Storm
288080 - digitizing_quote_and_ordering_system digitizing_quote_and_ordering_system Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parame… NVD-CWE-Other
CVE-2007-0144 2017-10-19 10:29 2007-01-10 Show GitHub Exploit DB Packet Storm