Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239891 6.8 警告 Logitech - Logitech VideoCall の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2918 2012-09-25 16:47 2007-05-31 Show GitHub Exploit DB Packet Storm
239892 5 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin における削除済みユーザの違反 "red flag" を発見される脆弱性 - CVE-2007-2912 2012-09-25 16:47 2007-02-13 Show GitHub Exploit DB Packet Storm
239893 8.5 危険 vBulletin Solutions, Inc. - Jelsoft vBulletin の admincp/attachment.php における SQL インジェクションの脆弱性 - CVE-2007-2911 2012-09-25 16:47 2007-03-19 Show GitHub Exploit DB Packet Storm
239894 4.3 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-2910 2012-09-25 16:47 2007-05-15 Show GitHub Exploit DB Packet Storm
239895 3.5 注意 vBulletin Solutions, Inc. - Jelsoft vBulletin の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2909 2012-09-25 16:47 2007-05-15 Show GitHub Exploit DB Packet Storm
239896 4.3 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2908 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
239897 5 警告 マイクロソフト - Microsoft Office 2000の OUACTRL.OCX におけるバッファオーバーフローの脆弱性 - CVE-2007-2903 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
239898 7.5 危険 navboard - NavBoard の admin_config.php における data/config.php に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2899 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
239899 7.5 危険 マイクロソフト - Microsoft IIS 6.0 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2897 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
239900 7.5 危険 LEAD Technologies, Inc. - LeadTools Raster Dialog File Object におけるバッファオーバーフローの脆弱性 - CVE-2007-2895 2012-09-25 16:47 2007-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267591 7.8 HIGH
Local 		symantec vip_access_desktop A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code. CWE-426
 Untrusted Search Path 		CVE-2016-6593 2024-11-21 11:56 2020-01-9 Show GitHub Exploit DB Packet Storm
267592 7.1 HIGH
Physics 		symantec norton_app_lock A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let a local malicious user bypass security restrictions. CWE-863
 Incorrect Authorization 		CVE-2016-6591 2024-11-21 11:56 2020-01-9 Show GitHub Exploit DB Packet Storm
267593 7.8 HIGH
Local 		symantec it_management_suite
ghost_solution_suite
endpoint_encryption
encryption_desktop 		A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Su… CWE-269
 Improper Privilege Management 		CVE-2016-6590 2024-11-21 11:56 2020-01-9 Show GitHub Exploit DB Packet Storm
267594 6.5 MEDIUM
Network 		symantec it_management_suite A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0. CWE-20
 Improper Input Validation  		CVE-2016-6589 2024-11-21 11:56 2020-01-9 Show GitHub Exploit DB Packet Storm
267595 8.8 HIGH
Network 		filecloud filecloud CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, p… CWE-352
 Origin Validation Error 		CVE-2016-6578 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
267596 9.8 CRITICAL
Network 		sungardas etrakit3 The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unaut… CWE-89
SQL Injection 		CVE-2016-6566 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
267597 7.5 HIGH
Network 		imagely nextgen_gallery The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user t… CWE-20
 Improper Input Validation  		CVE-2016-6565 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
267598 7.5 HIGH
Adjacent 		mitel shortel_mobility_client On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position … CWE-295
Improper Certificate Validation  		CVE-2016-6562 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
267599 9.8 CRITICAL
Network 		synology ds107_firmware
ds213_firmware
ds116_firmware 		Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A re… CWE-255
Credentials Management 		CVE-2016-6554 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
267600 9.8 CRITICAL
Network 		nuuo nt-4040_titan_firmware Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulne… CWE-255
Credentials Management 		CVE-2016-6553 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm