Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205661 7.5 危険 Shilpi Computers Limited. - cApexWEB の servlet/capexweb.parentvalidatepassword における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5031 2012-01-5 14:19 2011-12-29 Show GitHub Exploit DB Packet Storm
205662 3.5 注意 valthebald - Drupal 用 Meta tags quick モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5030 2012-01-5 14:18 2011-12-14 Show GitHub Exploit DB Packet Storm
205663 4.3 警告 Alexander Palmo - Simple PHP Blog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5029 2012-01-5 11:07 2011-12-29 Show GitHub Exploit DB Packet Storm
205664 4 警告 Novell - Novell Sentinel Log Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5028 2012-01-5 10:49 2011-12-29 Show GitHub Exploit DB Packet Storm
205665 4.3 警告 Zabbix - Zabbix におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5027 2012-01-5 10:49 2011-08-4 Show GitHub Exploit DB Packet Storm
205666 4.3 警告 Zabbix - Zabbix における複数のクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4615 2012-01-5 10:48 2011-08-4 Show GitHub Exploit DB Packet Storm
205667 10 危険 ヒューレット・パッカード - HP Database Archiving Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4165 2012-01-5 10:47 2011-12-22 Show GitHub Exploit DB Packet Storm
205668 10 危険 ヒューレット・パッカード - HP Database Archiving Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4164 2012-01-5 10:46 2011-12-22 Show GitHub Exploit DB Packet Storm
205669 10 危険 ヒューレット・パッカード - HP Database Archiving Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4163 2012-01-5 10:44 2011-12-22 Show GitHub Exploit DB Packet Storm
205670 4.3 警告 Yaws - Yaws の wiki アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5025 2012-01-5 10:21 2011-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265591 - gforge gforge SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
CWE-20
SQL Injection
 Improper Input Validation  		CVE-2007-3913 2017-07-29 10:32 2007-09-7 Show GitHub Exploit DB Packet Storm
265592 - gforge gforge The following link provides information on the vulnerability: http://www.linuxcompatible.org/DSA_1369-1_New_gforge_packages_fix_SQL_injection_p95749.html CWE-89
CWE-20
SQL Injection
 Improper Input Validation  		CVE-2007-3913 2017-07-29 10:32 2007-09-7 Show GitHub Exploit DB Packet Storm
265593 - skk_openlab skk_tools The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file. CWE-59
Link Following 		CVE-2007-3916 2017-07-29 10:32 2007-09-24 Show GitHub Exploit DB Packet Storm
265594 - wesnoth wesnoth The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an… CWE-134
Use of Externally-Controlled Format String 		CVE-2007-3917 2017-07-29 10:32 2007-10-11 Show GitHub Exploit DB Packet Storm
265595 - gforge gforge gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files. CWE-59
Link Following 		CVE-2007-3921 2017-07-29 10:32 2007-11-8 Show GitHub Exploit DB Packet Storm
265596 - cisco wide_area_application_services The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Service… NVD-CWE-Other
CVE-2007-3923 2017-07-29 10:32 2007-07-21 Show GitHub Exploit DB Packet Storm
265597 - ipswitch imail_server
ipswitch_collaboration_suite 		Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Ch… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-3925 2017-07-29 10:32 2007-07-21 Show GitHub Exploit DB Packet Storm
265598 - ipswitch imail_server
ipswitch_collaboration_suite 		Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unkn… NVD-CWE-Other
CVE-2007-3927 2017-07-29 10:32 2007-07-21 Show GitHub Exploit DB Packet Storm
265599 - yahoo messenger Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-200… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-3928 2017-07-29 10:32 2007-07-21 Show GitHub Exploit DB Packet Storm
265600 - yahoo messenger The vendor has confirmed the vulnerability and a fix has been implemented server-side. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-3928 2017-07-29 10:32 2007-07-21 Show GitHub Exploit DB Packet Storm