Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240061 7.8 危険 シスコシステムズ (Linksys) - Linksys SPA941 VoIP Phone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2270 2012-09-25 16:47 2007-04-25 Show GitHub Exploit DB Packet Storm
240062 5 警告 Phorum - Phorum の admin.php におけるフルパスを取得される脆弱性 - CVE-2007-2250 2012-09-25 16:47 2007-04-18 Show GitHub Exploit DB Packet Storm
240063 6.5 警告 Phorum - Phorum の include/controlcenter/users.php における権限を取得される脆弱性 - CVE-2007-2249 2012-09-25 16:47 2007-04-18 Show GitHub Exploit DB Packet Storm
240064 4.3 警告 Phorum - Phorum の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-2248 2012-09-25 16:47 2007-04-18 Show GitHub Exploit DB Packet Storm
240065 5 警告 OpenBSD - OpenSSH におけるユーザアカウントの存在を決定される脆弱性 CWE-287
不適切な認証
CVE-2007-2243 2012-09-25 16:47 2007-04-25 Show GitHub Exploit DB Packet Storm
240066 7.1 危険 マイクロソフト - Microsoft Windows Graphics Device Interface におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2237 2012-09-25 16:47 2007-06-6 Show GitHub Exploit DB Packet Storm
240067 7.8 危険 Ipswitch, Inc. - WS_FTP 2007 の NetscapeFTPHandler の Initialize 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2213 2012-09-25 16:47 2007-04-24 Show GitHub Exploit DB Packet Storm
240068 7.5 危険 MyBB Group - MyBB の calendar.php における SQL インジェクションの脆弱性 - CVE-2007-2212 2012-09-25 16:47 2007-04-24 Show GitHub Exploit DB Packet Storm
240069 7.5 危険 mybulletinboard - MyBB の calendar.php における SQL インジェクションの脆弱性 - CVE-2007-2211 2012-09-25 16:47 2007-04-24 Show GitHub Exploit DB Packet Storm
240070 7.8 危険 netsprint - Netsprint Ask IE Toolbar の特定の ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2210 2012-09-25 16:47 2007-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266851 9.8 CRITICAL
Network
exponentcms exponent_cms SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey parameter. CWE-89
SQL Injection
CVE-2016-7789 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266852 9.8 CRITICAL
Network
exponentcms exponent_cms SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. CWE-89
SQL Injection
CVE-2016-7788 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266853 9.8 CRITICAL
Network
exponentcms exponent_cms SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the s… CWE-89
SQL Injection
CVE-2016-7784 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266854 9.8 CRITICAL
Network
exponentcms exponent_cms SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter. CWE-89
SQL Injection
CVE-2016-7783 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266855 9.8 CRITICAL
Network
exponentcms exponent_cms SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the src parameter. CWE-89
SQL Injection
CVE-2016-7782 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266856 9.8 CRITICAL
Network
exponentcms exponent_cms SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the author paramet… CWE-89
SQL Injection
CVE-2016-7781 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266857 9.8 CRITICAL
Network
exponentcms exponent_cms SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter. CWE-89
SQL Injection
CVE-2016-7780 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266858 7.5 HIGH
Network
opensuse
fedoraproject
libass_project
leap
opensuse
fedora
libass
The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors. CWE-399
 Resource Management Errors
CVE-2016-7972 2024-11-21 11:58 2017-03-4 Show GitHub Exploit DB Packet Storm
266859 7.5 HIGH
Network
fedoraproject
libass_project
fedora
libass
Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-7970 2024-11-21 11:58 2017-03-4 Show GitHub Exploit DB Packet Storm
266860 7.5 HIGH
Network
opensuse
fedoraproject
libass_project
leap
opensuse
fedora
libass
The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping … CWE-125
Out-of-bounds Read
CVE-2016-7969 2024-11-21 11:58 2017-03-4 Show GitHub Exploit DB Packet Storm