Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 12:22 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242551 7.5 危険 PHP-Fusion - PHP-Fusion 用の Arcade モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1978 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
242552 4.3 警告 holacms - holaCMS の index_cms.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1977 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
242553 6.9 警告 マイクロソフト - Microsoft Windows NT 4.0 の Windows Kernel における権限を取得される脆弱性 - CVE-2007-1973 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
242554 5 警告 Mozilla Foundation - Mozilla Firefox におけるフィッシング攻撃を実行される脆弱性 - CVE-2007-1970 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
242555 6 警告 MyBB Group
mybulletinboard
- MyBB の member.php における任意のアカウントのパスワードを変更される脆弱性 - CVE-2007-1964 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
242556 5.1 警告 mywebland - myWebland myBloggie における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1899 2012-09-25 16:47 2008-07-8 Show GitHub Exploit DB Packet Storm
242557 7.5 危険 MyBB Group
mybulletinboard
- MyBB の class_session.php における SQL インジェクションの脆弱性 - CVE-2007-1963 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
242558 7.5 危険 onelook - onelook courts on-line におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-1953 2012-09-25 16:47 2007-04-10 Show GitHub Exploit DB Packet Storm
242559 7.5 危険 onelook - onelook onebyone CMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-1952 2012-09-25 16:47 2007-04-10 Show GitHub Exploit DB Packet Storm
242560 7.5 危険 onelook - onelook obo Shop におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-1951 2012-09-25 16:47 2007-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285811 - autodesk design_review The AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file. CWE-20
 Improper Input Validation 
CVE-2014-9268 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
285812 - ptc isoview Heap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute arbitrary code via a crafted ViewPort property value. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9267 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
285813 - samsung smart_viewer The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors. CWE-94
Code Injection
CVE-2014-9266 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
285814 - samsung smartviewer Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9265 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
285815 - 3s_pocketnet_tech 3s_pocketnet_tech_video_management_software Multiple buffer overflows in the PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 control in 3S Pocketnet Tech VMS allow remote attackers to execute arbitrary code via a crafted string to the (1) Start… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9263 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
285816 - pyyaml libyaml scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vect… CWE-20
 Improper Input Validation 
CVE-2014-9130 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
285817 - jasper_project jasper Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via… CWE-189
Numeric Errors
CVE-2014-9029 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
285818 - f5 big-ip Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2014-9342 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm
285819 - phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter. CWE-79
Cross-site Scripting
CVE-2014-9219 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm
285820 - phpmyadmin phpmyadmin libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via a long p… CWE-399
 Resource Management Errors
CVE-2014-9218 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm