Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240121 9.3 危険 Intuit - Intuit QuickBooks Online Edition ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-0322 2012-09-25 16:47 2007-09-5 Show GitHub Exploit DB Packet Storm
240122 9.3 危険 macrovision - Macrovision FLEXnet Connect 用の isusweb.dll におけるバッファオーバーフローの脆弱性 - CVE-2007-0321 2012-09-25 16:47 2007-02-22 Show GitHub Exploit DB Packet Storm
240123 9.3 危険 macrovision - Macrovision InstallFromTheWeb 用の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-0320 2012-09-25 16:47 2007-02-22 Show GitHub Exploit DB Packet Storm
240124 7.5 危険 okulsistem okul web - Okul Web Otomasyon Sistemi の etkinlikbak.asp における SQL インジェクションの脆弱性 - CVE-2007-0305 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
240125 7.5 危険 mint - MiNT Haber Sistemi の duyuru.asp における SQL インジェクションの脆弱性 - CVE-2007-0304 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
240126 10 危険 pancake.org - Zina における脆弱性 - CVE-2007-0303 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
240127 6.8 警告 InstantASP Ltd. - InstantASP におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0302 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
240128 4 警告 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne における脆弱性 - CVE-2007-0297 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240129 2.1 注意 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne における脆弱性 - CVE-2007-0296 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240130 7.8 危険 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne における脆弱性 - CVE-2007-0295 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267951 9.8 CRITICAL
Network
apple watchos
tvos
iphone_os
mac_os_x
Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4702 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267952 6.2 MEDIUM
Local
apple mac_os_x Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a crafted SO_EXECPATH environment variable. CWE-20
 Improper Input Validation 
CVE-2016-4701 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267953 7.8 HIGH
Local
apple mac_os_x AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability th… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4700 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267954 7.8 HIGH
Local
apple mac_os_x AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability th… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4699 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267955 7.8 HIGH
Local
apple iphone_os
mac_os_x
AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, which allows attackers to execute arbitrar… CWE-20
 Improper Input Validation 
CVE-2016-4698 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267956 7.8 HIGH
Local
apple mac_os_x Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4697 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267957 7.8 HIGH
Local
apple mac_os_x AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. CWE-476
 NULL Pointer Dereference
CVE-2016-4696 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267958 9.1 CRITICAL
Network
apple mac_os_x
os_x_server
The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data… CWE-284
Improper Access Control
CVE-2016-4694 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267959 9.8 CRITICAL
Network
apple
xmlsoft
watchos
tvos
iphone_os
mac_os_x
libxml2
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, wh… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-4658 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm
267960 6.1 MEDIUM
Network
apple safari
iphone_os
Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Unive… CWE-79
Cross-site Scripting
CVE-2016-4618 2024-11-21 11:52 2016-09-25 Show GitHub Exploit DB Packet Storm