Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240041 7.5 危険 MODX - MODx 用の MuddyDogPaws FileDownload スニペットにおける任意のファイルをダウンロードされる脆弱性 - CVE-2007-0659 2012-09-25 16:47 2007-02-1 Show GitHub Exploit DB Packet Storm
240042 10 危険 MicroWorld Technologies Inc. - MicroWorld Technologies eScan の MWAGENT.EXE における任意のコマンドを実行される脆弱性 - CVE-2007-0655 2012-09-25 16:47 2007-05-2 Show GitHub Exploit DB Packet Storm
240043 5.1 警告 MailEnable - MailEnable Professional におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-0652 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
240044 4.3 警告 MailEnable - MailEnable Professional におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0651 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
240045 6.8 警告 makeindex - teTeX の makeindex 用の mkind.c におけるバッファオーバーフローの脆弱性 - CVE-2007-0650 2012-09-25 16:47 2007-02-1 Show GitHub Exploit DB Packet Storm
240046 4.3 警告 OpenEMR - OpenEMR の interface/globals.php における任意のプログラム変数を上書きされる脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0649 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240047 7.5 危険 GuppYTeam - GuppY の error.php における任意の PHP コードを挿入される脆弱性 - CVE-2007-0639 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240048 2.1 注意 inotify - inotify における脆弱性 - CVE-2007-0636 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240049 4.9 警告 michael still - Michael Still gtalkbot における重要な情報を取得される脆弱性 - CVE-2007-0627 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240050 4.9 警告 NoMachine - NoMachine NX Server の nxconfigure.sh におけるサーバ設定キーを変更される脆弱性 - CVE-2007-0625 2012-09-25 16:47 2007-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267661 6.5 MEDIUM
Network 		mozilla firefox The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conju… CWE-125
Out-of-bounds Read 		CVE-2016-5271 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267662 9.8 CRITICAL
Network 		mozilla firefox Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers … CWE-119
CWE-787
Incorrect Access of Indexable Resource ('Range Error') 
 Out-of-bounds Write 		CVE-2016-5270 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267663 9.8 CRITICAL
Network 		mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5257 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267664 9.8 CRITICAL
Network 		mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exe… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5256 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267665 7.8 HIGH
Local 		lenovo bios The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devi… CWE-254
 7PK - Security Features 		CVE-2016-5247 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267666 8.1 HIGH
Network 		apache zookeeper Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command str… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5017 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267667 6.1 MEDIUM
Network 		fortinet fortiwan Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statisti… CWE-79
Cross-site Scripting 		CVE-2016-4969 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267668 6.5 MEDIUM
Network 		fortinet fortiwan The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request. CWE-200
Information Exposure 		CVE-2016-4968 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267669 6.5 MEDIUM
Network 		fortinet fortiwan Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of the device configuration via script/cfg_show.php or (2) PCA… CWE-200
Information Exposure 		CVE-2016-4967 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267670 6.5 MEDIUM
Network 		fortinet fortiwan The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter. CWE-287
Improper Authentication 		CVE-2016-4966 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm