Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194401	6.1	警告 Network	b2evolution	-	b2evolution におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-7149	2017-01-30 15:34	2016-08-13	Show	GitHub Exploit DB Packet Storm

194402	7.5	重要 Network	Zimbra	-	Zimbra Collaboration における脆弱性	CWE-noinfo 情報不足	CVE-2016-4019	2017-01-30 15:08	2016-04-14	Show	GitHub Exploit DB Packet Storm

194403	6.1	警告 Network	Zimbra	-	Zimbra Collaboration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-3999	2017-01-30 15:08	2016-04-12	Show	GitHub Exploit DB Packet Storm

194404	9.1	緊急 Network	Zimbra	-	Zimbra Collaboration におけるデシリアライゼーション攻撃を実行される脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2016-3415	2017-01-30 15:08	2016-03-17	Show	GitHub Exploit DB Packet Storm

194405	6.5	警告 Network	Zimbra	-	Zimbra Collaboration における脆弱性	CWE-noinfo 情報不足	CVE-2016-3414	2017-01-30 15:08	2016-06-28	Show	GitHub Exploit DB Packet Storm

194406	7.5	重要 Network	Zimbra	-	Zimbra Collaboration における脆弱性	CWE-noinfo 情報不足	CVE-2016-3413	2017-01-30 15:08	2016-03-17	Show	GitHub Exploit DB Packet Storm

194407	6.1	警告 Network	Zimbra	-	Zimbra Collaboration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-3412	2017-01-30 15:08	2016-03-17	Show	GitHub Exploit DB Packet Storm

194408	6.1	警告 Network	Zimbra	-	Zimbra Collaboration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-3411	2017-01-30 15:08	2016-03-17	Show	GitHub Exploit DB Packet Storm

194409	6.1	警告 Network	Zimbra	-	Zimbra Collaboration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-3410	2017-01-30 15:08	2016-03-17	Show	GitHub Exploit DB Packet Storm

194410	6.1	警告 Network	Zimbra	-	Zimbra Collaboration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-3409	2017-01-30 15:08	2016-03-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293941	-	lussumo	vanilla	Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2007-5644	2017-09-29 10:29	2007-10-24	Show	GitHub Exploit DB Packet Storm

293942	-	phppm	php_project_management	Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the full_path parameter to (1) certin…	CWE-94 Code Injection	CVE-2007-5641	2017-09-29 10:29	2007-10-24	Show	GitHub Exploit DB Packet Storm

293943	-	phppm	php_project_management	Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the def_lang pa…	CWE-22 Path Traversal	CVE-2007-5642	2017-09-29 10:29	2007-10-24	Show	GitHub Exploit DB Packet Storm

293944	-	cisco	catos ios	Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 a…	NVD-CWE-noinfo	CVE-2007-5651	2017-09-29 10:29	2007-10-24	Show	GitHub Exploit DB Packet Storm

293945	-	php	php	The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, a…	CWE-78 OS Command	CVE-2007-5653	2017-09-29 10:29	2007-10-24	Show	GitHub Exploit DB Packet Storm

293946	-	litespeed_technologies	litespeed_web_server	LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source …	CWE-200 Information Exposure	CVE-2007-5654	2017-09-29 10:29	2007-10-24	Show	GitHub Exploit DB Packet Storm

293947	-	adobe	acrobat acrobat_reader	Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in. NOTE: this is…	CWE-94 Code Injection	CVE-2007-5663	2017-09-29 10:29	2008-02-13	Show	GitHub Exploit DB Packet Storm

293948	-	adobe	acrobat acrobat_reader	Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current workin…	CWE-94 Code Injection	CVE-2007-5666	2017-09-29 10:29	2008-02-13	Show	GitHub Exploit DB Packet Storm

293949	-	instaguide	weather	Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files…	CWE-22 Path Traversal	CVE-2007-5674	2017-09-29 10:29	2007-10-25	Show	GitHub Exploit DB Packet Storm

293950	-	futurenuke	platinum	PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nuke_bb_root_path parameter.	CWE-94 Code Injection	CVE-2007-5676	2017-09-29 10:29	2007-10-25	Show	GitHub Exploit DB Packet Storm