Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200071 7.8 危険 BEAシステムズ - BEA WebLogic Integration の Test View Console におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2705 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
200072 3.6 注意 BEAシステムズ - BEA WebLogic Portal GA における特権を有するリソースへアクセスされる脆弱性 - CVE-2007-2703 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
200073 3.5 注意 BEAシステムズ - BEA WebLogic Portal GA の GroupSpace アプリケーションにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2702 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
200074 7.5 危険 アップル
アドビシステムズ		 - Adobe CS3 で使用される Adobe Version Cue CS3 Server のインストーラにおけるファイアウォールルールを回避される脆弱性 - CVE-2007-2682 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
200075 7.5 危険 b2evolution - b2evolution の blogs/index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2681 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200076 7.5 危険 censura - Censura の includes/funcs_vendors.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-2673 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200077 4.3 警告 globalmegacorp - PHPChain におけるインストールパスを取得される脆弱性 - CVE-2007-2670 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200078 4.3 警告 globalmegacorp - PHPChain におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2669 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200079 9.3 危険 db soft lab - VImpX.ocx の DB Software Laboratory VImpX ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-2667 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200080 7.5 危険 beacon - Beacon の language/1/splash.lang.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2663 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267281 - invision_power_services invision_power_board Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files. NVD-CWE-Other
CVE-2007-2349 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267282 - invision_power_services invision_power_board The vendor has addressed this issue with the following product update: http://forums.invisionpower.com/index.php?showtopic=234377 NVD-CWE-Other
CVE-2007-2349 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267283 - hp power_manager_remote_agent Unspecified vulnerability in the HP Power Manager Remote Agent (RA) 4.0Build10 and earlier in HP-UX B.11.11 and B.11.23 allows local users to execute arbitrary code via unspecified vectors. NVD-CWE-Other
CVE-2007-2351 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267284 - hp power_manager_remote_agent The vendor has addressed this issue with the following product update: http://h18004.www1.hp.com/products/servers/proliantstorage/power-protection/software/power-manager/pm3-dl.html NVD-CWE-Other
CVE-2007-2351 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267285 - apache axis Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message. CWE-200
Information Exposure 		CVE-2007-2353 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267286 - opendap server3 The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. NVD-CWE-Other
CVE-2007-2355 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267287 - opendap server3 The vendor has addressed this issue with the following solution: http://www.opendap.org/server3-patch-04.27.2007.txt NVD-CWE-Other
CVE-2007-2355 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267288 - symantec backupexec_system_recovery
livestate_recovery
norton_ghost
norton_save_and_recovery 		Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain priv… NVD-CWE-Other
CVE-2007-2359 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267289 - symantec backupexec_system_recovery
livestate_recovery
norton_ghost
norton_save_and_recovery 		Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (… NVD-CWE-Other
CVE-2007-2361 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm
267290 - don_moore mydns Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based b… NVD-CWE-Other
CVE-2007-2362 2017-07-29 10:31 2007-05-1 Show GitHub Exploit DB Packet Storm