Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231271 7.8 危険 VideoLAN - VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性 - CVE-2007-3467 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
231272 10 危険 sofaware - Check Point SofaWare Safe@Office における特定のデフォルトパスワードを含む脆弱性 - CVE-2007-3465 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
231273 8.5 危険 sofaware - Check Point SofaWare Safe@Office における権限を取得される脆弱性 - CVE-2007-3464 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
231274 6 警告 sofaware - Check Point SofaWare Safe@Office におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3462 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
231275 10 危険 トレンドマイクロ - Trend Micro OfficeScan Corporate Edition の cgiChkMasterPwd.exe におけるパスワード要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3455 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231276 10 危険 トレンドマイクロ - Trend Micro OfficeScan Corporate Edition の CGIOCommon.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3454 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231277 4.3 警告 sj labs - SJ Labs SJphone におけるバッファオーバーフローの脆弱性 - CVE-2007-3445 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231278 4.3 警告 BlackBerry - Research in Motion BlackBerry 7270 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3444 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231279 2.3 注意 BlackBerry - Research in Motion BlackBerry 7270 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3443 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231280 2.3 注意 BlackBerry - Research in Motion BlackBerry 7270 におけるフォーマットストリングの脆弱性 - CVE-2007-3442 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315311 9.8 CRITICAL
Network 		h3c magic_b1st_firmware H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. CWE-798
 Use of Hard-coded Credentials 		CVE-2024-42638 2024-09-11 21:53 2024-08-17 Show GitHub Exploit DB Packet Storm
315312 7.5 HIGH
Network 		google android In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution pri… CWE-120
Classic Buffer Overflow 		CVE-2024-34727 2024-09-11 21:43 2024-08-16 Show GitHub Exploit DB Packet Storm
315313 8.2 HIGH
Network 		xpdfreader xpdf In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read fro… CWE-908
 Use of Uninitialized Resource 		CVE-2024-7868 2024-09-11 21:40 2024-08-16 Show GitHub Exploit DB Packet Storm
315314 8.8 HIGH
Network 		xyzscripts insert_php_code_snippet Cross-Site Request Forgery (CSRF) vulnerability in xyzscripts.Com Insert PHP Code Snippet.This issue affects Insert PHP Code Snippet: from n/a through 1.3.6. CWE-352
 Origin Validation Error 		CVE-2024-43275 2024-09-11 21:33 2024-08-15 Show GitHub Exploit DB Packet Storm
315315 - - - Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perform Remote Code Execution (RCE). This issue affects: Comm… - CVE-2024-43690 2024-09-11 14:15 2024-09-11 Show GitHub Exploit DB Packet Storm
315316 - - - Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious … - CVE-2024-21529 2024-09-11 14:15 2024-09-11 Show GitHub Exploit DB Packet Storm
315317 - - - Affected versions of Octopus Server had a weak content security policy. - CVE-2024-1656 2024-09-11 14:15 2024-09-11 Show GitHub Exploit DB Packet Storm
315318 - - - Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with physical access to Controller wiring to instigate a reboot lea… - CVE-2024-39808 2024-09-11 13:15 2024-09-11 Show GitHub Exploit DB Packet Storm
315319 - - - Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated operator to reboot the Controller, caus… - CVE-2024-24972 2024-09-11 13:15 2024-09-11 Show GitHub Exploit DB Packet Storm
315320 - - - Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify Controller configuration during an auth… - CVE-2024-23906 2024-09-11 13:15 2024-09-11 Show GitHub Exploit DB Packet Storm