Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
246441 5.8 警告 bitflu - Bitflu の StorageFarabDb モジュールにおける任意のファイルに対してデータを作成する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6636 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246442 5 警告 feng - Netembryo の Url_init 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-6630 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246443 5 警告 feng - LScube Feng におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-6629 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246444 5 警告 feng - LScube Feng におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-6628 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246445 7.5 危険 feng - LScube Feng の RTSP_remove_msg 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2007-6627 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246446 7.5 危険 feng - LScube Feng の RTSP_valid_response_msg 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6626 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246447 7.5 危険 Atlassian - Atlassian JIRA Enterprise Edition の Setup Wizard におけるデフォルト言語を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6619 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246448 5 警告 Atlassian - JIRA Enterprise Edition における別のユーザの共有フィルタを削除される脆弱性 CWE-DesignError
CVE-2007-6618 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246449 4.3 警告 Atlassian - JIRA Enterprise Edition の 500page.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6617 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
246450 6.8 警告 agaresmedia - Agares Media phpAutoVideo の includes/block.php におけるディレクトリトラバーサルの脆弱性 CWE-94
コード・インジェクション
CVE-2007-6615 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348441 - icewarp
merak
web_mail
mail_server
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the importfile parameter to … NVD-CWE-Other
CVE-2005-1491 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348442 - dead_pirate_software simplecam Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URL. NVD-CWE-Other
CVE-2005-1493 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348443 - megabook megabook Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) entryid or (2) password parameter. NVD-CWE-Other
CVE-2005-1494 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348444 - oracle application_server
oracle10g
oracle9i
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection. NVD-CWE-Other
CVE-2005-1495 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348445 - oracle application_server
oracle10g
oracle9i
Applying patchset 10.1.0.4 is fixing this issue for Oracle 10g. Oracle 9i is still vulnerable. NVD-CWE-Other
CVE-2005-1495 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348446 - oracle application_server
oracle10g
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user. NVD-CWE-Other
CVE-2005-1496 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348447 - oracle application_server
oracle10g
Applying patchset 10.1.0.4 is fixing this issue. NVD-CWE-Other
CVE-2005-1496 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348448 - mywebland mybloggie index.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an invalid post_id parameter, which reveals the path in an error message. NVD-CWE-Other
CVE-2005-1497 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348449 - mywebland mybloggie Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) year parameter in viewmode.php, or the (2) cat_id, (3)… NVD-CWE-Other
CVE-2005-1498 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
348450 - mywebland mybloggie Download newest myBloggie from http://mywebland.com/ NVD-CWE-Other
CVE-2005-1498 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm