Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230671 7.5 危険 phpecho cms - PHPEcho CMS の modules/admin/modules/gallery.php における SQL インジェクションの脆弱性 - CVE-2007-2866 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
230672 9.3 危険 phpPgAdmin - phpPgAdmin の sqledit.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2865 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
230673 7.5 危険 saxon - SAXON における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2861 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230674 7.5 危険 simpgb - SimpGB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2859 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230675 6.5 警告 phpBB - phpBB 用の IP-Tracking Mod における SQL インジェクションの脆弱性 - CVE-2007-2858 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230676 7.5 危険 zakkis technology corporation - ABC Excel Parser の sample/xls2mysql における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2857 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230677 10 危険 sky software - Sky Software Shell MegaPack ActiveX の shComboBox ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2848 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
230678 6.8 警告 unicon-imc2 - unicon-imc2 の ImmModules/cce/ におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2835 2012-12-20 18:19 2007-07-1 Show GitHub Exploit DB Packet Storm
230679 9.3 危険 wavelink media - TutorialCMS における認証を回避される脆弱性 - CVE-2007-2822 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
230680 7.5 危険 WordPress.org - WordPress の wp-admin/admin-ajax.php における SQL インジェクションの脆弱性 - CVE-2007-2821 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317381 9.8 CRITICAL
Network 		acme thttpd Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code. CWE-193
 Off-by-one Error 		CVE-2001-1496 2024-02-8 11:19 2001-12-31 Show GitHub Exploit DB Packet Storm
317382 9.8 CRITICAL
Network 		mbedthis appweb_http_server Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters. CWE-178
 Improper Handling of Case Sensitivity 		CVE-2004-2214 2024-02-8 11:12 2004-12-31 Show GitHub Exploit DB Packet Storm
317383 9.8 CRITICAL
Network 		novell edirectory Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing. CWE-178
 Improper Handling of Case Sensitivity 		CVE-2002-2119 2024-02-8 11:12 2002-12-31 Show GitHub Exploit DB Packet Storm
317384 7.5 HIGH
Network 		apple quicktime_streaming_server
darwin_streaming_server
mac_os_x_server
mac_os_x 		Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attack… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2004-1083 2024-02-8 11:09 2004-12-3 Show GitHub Exploit DB Packet Storm
317385 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-22984 2024-02-8 05:15 2024-02-8 Show GitHub Exploit DB Packet Storm
317386 - cisco ios AAA authentication on Cisco systems allows attackers to execute commands without authorization. NVD-CWE-Other
CVE-1999-0293 2024-02-8 03:06 1998-01-1 Show GitHub Exploit DB Packet Storm
317387 - - - Rejected reason: We have rejected this CVE as it was determined a non-security issue by the vendor. - CVE-2023-5584 2024-02-7 00:15 2024-02-7 Show GitHub Exploit DB Packet Storm
317388 - postgresql postgresql The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays. NVD-CWE-Other
CVE-2005-0246 2024-02-6 04:56 2005-05-2 Show GitHub Exploit DB Packet Storm
317389 - - - Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. - CVE-2023-47170 2024-02-5 14:15 2024-02-5 Show GitHub Exploit DB Packet Storm
317390 9.8 CRITICAL
Network 		pingtel xpressa_firmware Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attacke… CWE-494
 Download of Code Without Integrity Check 		CVE-2002-0671 2024-02-3 11:32 2002-07-23 Show GitHub Exploit DB Packet Storm