Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240061 7.5 危険 johannes gijsbers - Johannes Gijsbers AINS の ains_main.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0570 2012-09-25 16:47 2007-01-30 Show GitHub Exploit DB Packet Storm
240062 7.5 危険 myphpcommander - MyPHPCommander の system/lib/package.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0568 2012-09-25 16:47 2007-01-30 Show GitHub Exploit DB Packet Storm
240063 6.8 警告 interactive-scripts.com - Interactive-Scripts.Com PHP Membership Manager の admin.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0567 2012-09-25 16:47 2007-01-30 Show GitHub Exploit DB Packet Storm
240064 4.3 警告 マイクロソフト - Microsoft Windows XP SP2 の explorer.exe におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0562 2012-09-25 16:47 2007-01-30 Show GitHub Exploit DB Packet Storm
240065 7.5 危険 inter7 - Inter7 vHostAdmin における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0558 2012-09-25 16:47 2007-01-30 Show GitHub Exploit DB Packet Storm
240066 7.5 危険 guo xu guos posting system - GPS の print.asp における SQL インジェクションの脆弱性 - CVE-2007-0554 2012-09-25 16:47 2007-01-29 Show GitHub Exploit DB Packet Storm
240067 6.8 警告 oh no not another cms - Onnac の install/default/error404.html におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0552 2012-09-25 16:47 2007-01-29 Show GitHub Exploit DB Packet Storm
240068 5 警告 karjasoft - KarjaSoft Sami HTTP Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0548 2012-09-25 16:47 2007-01-29 Show GitHub Exploit DB Packet Storm
240069 7.8 危険 maxtricity - Maxtricity Tagger におけるパスワードを含むデータベースをダウンロードされる脆弱性 - CVE-2007-0545 2012-09-25 16:47 2007-01-29 Show GitHub Exploit DB Packet Storm
240070 6 警告 MyBB Group - MyBB の private.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0544 2012-09-25 16:47 2007-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267661 6.5 MEDIUM
Network 		mozilla firefox The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conju… CWE-125
Out-of-bounds Read 		CVE-2016-5271 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267662 9.8 CRITICAL
Network 		mozilla firefox Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers … CWE-119
CWE-787
Incorrect Access of Indexable Resource ('Range Error') 
 Out-of-bounds Write 		CVE-2016-5270 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267663 9.8 CRITICAL
Network 		mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5257 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267664 9.8 CRITICAL
Network 		mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exe… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5256 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267665 7.8 HIGH
Local 		lenovo bios The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devi… CWE-254
 7PK - Security Features 		CVE-2016-5247 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
267666 8.1 HIGH
Network 		apache zookeeper Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command str… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5017 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267667 6.1 MEDIUM
Network 		fortinet fortiwan Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statisti… CWE-79
Cross-site Scripting 		CVE-2016-4969 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267668 6.5 MEDIUM
Network 		fortinet fortiwan The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request. CWE-200
Information Exposure 		CVE-2016-4968 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267669 6.5 MEDIUM
Network 		fortinet fortiwan Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of the device configuration via script/cfg_show.php or (2) PCA… CWE-200
Information Exposure 		CVE-2016-4967 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm
267670 6.5 MEDIUM
Network 		fortinet fortiwan The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter. CWE-287
Improper Authentication 		CVE-2016-4966 2024-11-21 11:53 2016-09-21 Show GitHub Exploit DB Packet Storm