Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194971 6.1 警告
Network
Horde - Horde Groupware および Horde Groupware Webmail Edition の Horde Text Filter API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5303 2017-01-4 17:54 2016-08-16 Show GitHub Exploit DB Packet Storm
194972 6.1 警告
Network
Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4552 2017-01-4 17:54 2016-05-6 Show GitHub Exploit DB Packet Storm
194973 6.6 警告
Network
BlackBerry - BlackBerry Good Enterprise Mobility Server の Apache Karaf コマンドシェルに実装される GEMS における GEMS サーバ上のローカル管理者の権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2016-3129 2017-01-4 17:46 2016-12-14 Show GitHub Exploit DB Packet Storm
194974 7.5 重要
Network
SAP - SAP Solution Manager の Webdynpro における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-10005 2017-01-4 17:39 2016-09-13 Show GitHub Exploit DB Packet Storm
194975 4.3 警告
Network
Google - iOS 用 Google Chrome における特定の URL スキームへのナビゲーション上の制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5193 2017-01-4 17:37 2016-10-12 Show GitHub Exploit DB Packet Storm
194976 6.5 警告
Network
Google - Windows 用 Google Chrome の Blink におけるクロスオリジン制約を回避される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5192 2017-01-4 17:37 2016-10-12 Show GitHub Exploit DB Packet Storm
194977 6.1 警告
Network
Google - Google Chrome のブックマークの処理におけるユニバーサルクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5191 2017-01-4 17:37 2016-10-12 Show GitHub Exploit DB Packet Storm
194978 6.3 警告
Network
Google - Google Chrome における境界外メモリ読み取りを実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-5190 2017-01-4 17:37 2016-10-12 Show GitHub Exploit DB Packet Storm
194979 6.5 警告
Network
Google - Google Chrome における Omnibox のコンテンツを偽造される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5189 2017-01-4 17:37 2016-10-12 Show GitHub Exploit DB Packet Storm
194980 5.3 警告
Local
Google - Google Chrome の Devtools における境界外メモリ読み取りを実行される脆弱性 CWE-125
境界外読み取り
CVE-2016-5186 2017-01-4 17:37 2016-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294051 - xkiosk xkiosk_web PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PEARPA… CWE-94
Code Injection
CVE-2007-5314 2017-09-29 10:29 2007-10-10 Show GitHub Exploit DB Packet Storm
294052 - xkiosk xkiosk_web The vendor has provided the following patch information: The patch is located at http://xkiosk.net/xkiosk.3.0.1j.web.5314.fix.zip How to apply the fix: Extract "upload" folder contents to you… CWE-94
Code Injection
CVE-2007-5314 2017-09-29 10:29 2007-10-10 Show GitHub Exploit DB Packet Storm
294053 - softpedia livealbum PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbum_dir parame… CWE-94
Code Injection
CVE-2007-5315 2017-09-29 10:29 2007-10-10 Show GitHub Exploit DB Packet Storm
294054 - softbizscripts softbiz_jobs_and_recruitment_script SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. CWE-89
SQL Injection
CVE-2007-5316 2017-09-29 10:29 2007-10-10 Show GitHub Exploit DB Packet Storm
294055 - sun solaris Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 8, 9, and 10 allows local users with console (/dev/console) access to cause a denial of service ("unusable" system console) vi… NVD-CWE-Other
CVE-2007-5319 2017-09-29 10:29 2007-10-10 Show GitHub Exploit DB Packet Storm
294056 - microsoft visual_foxpro Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute arbitrary programs by specifying them as an argument to the… CWE-78
OS Command 
CVE-2007-5322 2017-09-29 10:29 2007-10-10 Show GitHub Exploit DB Packet Storm
294057 - sun solaris Unspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors. CWE-399
 Resource Management Errors
CVE-2007-5367 2017-09-29 10:29 2007-10-11 Show GitHub Exploit DB Packet Storm
294058 - sun solaris Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a denial of service (multiple application hang) via unspecified vectors. NVD-CWE-noinfo
CVE-2007-5368 2017-09-29 10:29 2007-10-11 Show GitHub Exploit DB Packet Storm
294059 - lightblog lightblog cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account. CWE-287
Improper Authentication
CVE-2007-5374 2017-09-29 10:29 2007-10-11 Show GitHub Exploit DB Packet Storm
294060 - pindorama pindorama PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the c[components] parameter. CWE-94
Code Injection
CVE-2007-5387 2017-09-29 10:29 2007-10-12 Show GitHub Exploit DB Packet Storm