Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240011	6.8	警告	MapTools.org	-	MapLab の gmapfactory/params.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-1843	2012-09-25 16:47	2007-04-3	Show	GitHub Exploit DB Packet Storm

240012	7.5	危険	jsboard	-	JSBoard の login.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-1842	2012-09-25 16:47	2007-04-3	Show	GitHub Exploit DB Packet Storm

240013	4.3	警告	LDAP Account Manager	-	LAM の lib/modules.inc における脆弱性	-	CVE-2007-1840	2012-09-25 16:47	2007-04-2	Show	GitHub Exploit DB Packet Storm

240014	7.5	危険	mangobery cms	-	MangoBery CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1837	2012-09-25 16:47	2007-04-2	Show	GitHub Exploit DB Packet Storm

240015	4.6	警告	The PHP Group	-	PHP における open_basedir 制限を回避される脆弱性	-	CVE-2007-1835	2012-09-25 16:47	2007-03-28	Show	GitHub Exploit DB Packet Storm

240016	5.1	警告	The PHP Group	-	PHP の hp_stream_filter_create 関数におけるバッファオーバーフローの脆弱性	-	CVE-2007-1824	2012-09-25 16:47	2007-03-31	Show	GitHub Exploit DB Packet Storm

240017	9.3	危険	Nortel Networks	-	Nortel Networks CallPilot などにおけるメッセージを読み取られる脆弱性	-	CVE-2007-1820	2012-09-25 16:47	2007-04-2	Show	GitHub Exploit DB Packet Storm

240018	9.3	危険	ヒューレット・パッカード	-	Mercury Quality Center の TD の Spider90.ocx におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-1819	2012-09-25 16:47	2007-03-13	Show	GitHub Exploit DB Packet Storm

240019	7.5	危険	lykoszine	-	Xoops の lykos_reviews モジュールの index.php における SQL インジェクションの脆弱性	-	CVE-2007-1817	2012-09-25 16:47	2007-04-2	Show	GitHub Exploit DB Packet Storm

240020	7.5	危険	inconnueteam	-	Xoops の eCal の display.php における SQL インジェクションの脆弱性	-	CVE-2007-1813	2012-09-25 16:47	2007-04-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267741	6.5	MEDIUM Network	symantec	messaging_gateway	Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn paramete…	CWE-22 Path Traversal	CVE-2016-5312	2024-11-21 11:54	2017-04-15	Show	GitHub Exploit DB Packet Storm

267742	5.5	MEDIUM Local	symantec broadcom	protection_engine protection_for_sharepoint_servers mail_security_for_microsoft_exchange messaging_gateway mail_security_for_domino endpoint_protection endpoint_protection_for_small…	The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec …	CWE-787 Out-of-bounds Write	CVE-2016-5310	2024-11-21 11:54	2017-04-15	Show	GitHub Exploit DB Packet Storm

267743	5.5	MEDIUM Local	symantec broadcom	protection_engine protection_for_sharepoint_servers mail_security_for_microsoft_exchange messaging_gateway mail_security_for_domino endpoint_protection endpoint_protection_for_small…	The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec …	CWE-125 Out-of-bounds Read	CVE-2016-5309	2024-11-21 11:54	2017-04-15	Show	GitHub Exploit DB Packet Storm

267744	8.8	HIGH Network	symantec	web_gateway	Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.	CWE-78 OS Command	CVE-2016-5313	2024-11-21 11:54	2017-04-13	Show	GitHub Exploit DB Packet Storm

267745	5.5	MEDIUM Local	libtiff debian	libtiff debian_linux	The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.	CWE-125 Out-of-bounds Read	CVE-2016-5322	2024-11-21 11:54	2017-04-12	Show	GitHub Exploit DB Packet Storm

267746	6.1	MEDIUM Network	smartbear	swagger-ui	Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.	CWE-79 Cross-site Scripting	CVE-2016-5682	2024-11-21 11:54	2017-04-10	Show	GitHub Exploit DB Packet Storm

267747	5.4	MEDIUM Network	opmantek	network_management_information_system	Opmantek NMIS before 8.5.12G has XSS via SNMP.	CWE-79 Cross-site Scripting	CVE-2016-5642	2024-11-21 11:54	2017-04-10	Show	GitHub Exploit DB Packet Storm

267748	5.5	MEDIUM Local	google	android	The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment (QSEE) only write to le…	CWE-200 Information Exposure	CVE-2016-5349	2024-11-21 11:54	2017-04-7	Show	GitHub Exploit DB Packet Storm

267749	8.8	HIGH Network	netiq	access_manager	A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.	CWE-352 Origin Validation Error	CVE-2016-5758	2024-11-21 11:54	2017-03-23	Show	GitHub Exploit DB Packet Storm

267750	9.8	CRITICAL Network	netiq	access_manager	iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, which could allow remote users to gain access to authenti…	CWE-200 Information Exposure	CVE-2016-5757	2024-11-21 11:54	2017-03-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed