Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193721 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の setup_imginfo_jpg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6235 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
193722 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の process_file 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-6234 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
193723 9.8 緊急
Network
The WebM Project
Fedora Project
- libwebp における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9085 2017-02-16 14:46 2016-10-10 Show GitHub Exploit DB Packet Storm
193724 5.5 警告
Local
cairographics.org - cairo の write_png 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9082 2017-02-16 14:46 2016-10-20 Show GitHub Exploit DB Packet Storm
193725 5.5 警告
Local
GNOME Project - librsvg2 の rsvg-paint_server.c の rsvg_pattern_fix_fallback 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-6163 2017-02-16 14:46 2016-07-7 Show GitHub Exploit DB Packet Storm
193726 8.8 重要
Network
トレンドマイクロ - Trend Micro VMI の /vmi/manager/engine/management/commands/apns_worker.py における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-6270 2017-02-16 14:30 2016-09-30 Show GitHub Exploit DB Packet Storm
193727 7.8 重要
Local
IBM - IBM Security Guardium Database Activity Monito アプライアンスにおけるコマンドを挿入される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-6065 2017-02-16 14:26 2016-12-15 Show GitHub Exploit DB Packet Storm
193728 6.3 警告
Network
IBM - IBM Security Privileged Identity Manager 仮想アプライアンスにおける悪意のあるファイルをアップロードされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5990 2017-02-16 14:26 2016-12-29 Show GitHub Exploit DB Packet Storm
193729 6.5 警告
Network
IBM - IBM Security Privileged Identity Manager 仮想アプライアンスにおける重要な情報を公開される脆弱性 CWE-200
情報漏えい
CVE-2016-5988 2017-02-16 14:26 2016-12-29 Show GitHub Exploit DB Packet Storm
193730 5.9 警告
Network
IBM - IBM Security Privileged Identity Manager 仮想アプライアンスにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-5966 2017-02-16 14:26 2016-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307061 - david_hansson ruby_on_rails Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Has… CWE-200
Information Exposure
CVE-2007-5379 2012-10-31 11:44 2007-10-20 Show GitHub Exploit DB Packet Storm
307062 - ibm websphere_application_server Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK33803. NVD-CWE-noinfo
CVE-2007-4839 2012-10-31 11:43 2007-09-13 Show GitHub Exploit DB Packet Storm
307063 - fail2ban fail2ban fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP … NVD-CWE-Other
CVE-2007-4321 2012-10-31 11:41 2007-08-14 Show GitHub Exploit DB Packet Storm
307064 - ac_zoom blockhosts BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of servi… NVD-CWE-Other
CVE-2007-4322 2012-10-31 11:41 2007-08-14 Show GitHub Exploit DB Packet Storm
307065 - 8e6 r3000_enterprise_filter Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be th… NVD-CWE-Other
CVE-2007-3842 2012-10-31 11:40 2007-07-18 Show GitHub Exploit DB Packet Storm
307066 - firebirdsql firebird Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via certain database operations with multi-byte character sets that trigger an atte… NVD-CWE-Other
CVE-2007-3527 2012-10-31 11:39 2007-07-4 Show GitHub Exploit DB Packet Storm
307067 - warzone warzone_2100_resurrection Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long filename when setting backgroun… NVD-CWE-Other
CVE-2007-3545 2012-10-31 11:39 2007-07-4 Show GitHub Exploit DB Packet Storm
307068 - maia_mailguard maia_mailguard Multiple directory traversal vulnerabilities in Maia Mailguard 1.0.2 and earlier might allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) prevlang and (2) super parameters t… NVD-CWE-Other
CVE-2007-3620 2012-10-31 11:39 2007-07-10 Show GitHub Exploit DB Packet Storm
307069 - maia_mailguard maia_mailguard Successful exploitation requires that "magic_quotes_gpc" is disabled. NVD-CWE-Other
CVE-2007-3620 2012-10-31 11:39 2007-07-10 Show GitHub Exploit DB Packet Storm
307070 - media_player_classic media_player_classic Divide-by-zero error in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file. NVD-CWE-Other
CVE-2007-3663 2012-10-31 11:39 2007-07-11 Show GitHub Exploit DB Packet Storm