Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240101 10 危険 michiel broek - mbse-bbs におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-0368 2012-09-25 16:47 2007-01-19 Show GitHub Exploit DB Packet Storm
240102 4.6 警告 maxum development corporation - Rumpus における脆弱性 - CVE-2007-0367 2012-09-25 16:47 2007-01-19 Show GitHub Exploit DB Packet Storm
240103 4.6 警告 maxum development corporation - Rumpus における権限を取得される脆弱性 - CVE-2007-0366 2012-09-25 16:47 2007-01-19 Show GitHub Exploit DB Packet Storm
240104 6.8 警告 nicola asuni - AIOCP におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0365 2012-09-25 16:47 2007-01-19 Show GitHub Exploit DB Packet Storm
240105 4.3 警告 nicecoder - nicecoder.com INDEXU におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-0364 2012-09-25 16:47 2007-01-19 Show GitHub Exploit DB Packet Storm
240106 6.8 警告 Openads - Openads などの admin-search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0363 2012-09-25 16:47 2007-01-18 Show GitHub Exploit DB Packet Storm
240107 7.5 危険 letterman - Joomla! の letterman コンポーネントにおける SQL インジェクションの脆弱性 - CVE-2007-0382 2012-09-25 16:47 2006-02-28 Show GitHub Exploit DB Packet Storm
240108 7.5 危険 oreon project - Oreon の lang/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0360 2012-09-25 16:47 2007-01-18 Show GitHub Exploit DB Packet Storm
240109 7.8 危険 ヒューレット・パッカード - HP Jetdirect の FTP サーバの実装におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0358 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
240110 7.5 危険 mgb - MGB OpenSource Gustbook の email.php における SQL インジェクションの脆弱性 - CVE-2007-0354 2012-09-25 16:47 2007-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267511 8.8 HIGH
Network 		oxidforge oxid_eshop OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9,… CWE-94
Code Injection 		CVE-2016-5072 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267512 8.8 HIGH
Network 		sierrawireless aleos_firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-5071 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267513 9.8 CRITICAL
Network 		sierrawireless aleos_firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. CWE-255
Credentials Management 		CVE-2016-5070 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267514 9.8 CRITICAL
Network 		sierrawireless aleos_firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL. CWE-613
 Insufficient Session Expiration 		CVE-2016-5069 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267515 9.8 CRITICAL
Network 		sierrawireless aleos_firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests. CWE-287
Improper Authentication 		CVE-2016-5068 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267516 8.8 HIGH
Network 		sierrawireless aleos_firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection. CWE-77
Command Injection 		CVE-2016-5067 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267517 9.8 CRITICAL
Network 		sierrawireless aleos_firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user. CWE-255
Credentials Management 		CVE-2016-5066 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267518 9.8 CRITICAL
Network 		sierrawireless aleos_firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection. CWE-77
Command Injection 		CVE-2016-5065 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267519 6.5 MEDIUM
Network 		osram lightify_pro OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application. CWE-200
Information Exposure 		CVE-2016-5059 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
267520 7.5 HIGH
Network 		osram lightify_pro OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay. CWE-284
Improper Access Control 		CVE-2016-5058 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm