Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240131 1.7 注意 オラクル - Oracle Enterprise Manager における脆弱性 - CVE-2007-0294 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240132 6.4 警告 オラクル - Oracle Enterprise Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2007-0293 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240133 7.5 危険 オラクル - Oracle Enterprise Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2007-0292 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240134 4 警告 オラクル - Oracle E-Business Suite and Applications における脆弱性 - CVE-2007-0291 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240135 5.5 警告 オラクル - Oracle E-Business Suite and Applications における脆弱性 - CVE-2007-0290 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240136 6.4 警告 オラクル - Oracle Collaboration Suite における脆弱性 - CVE-2007-0289 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240137 5 警告 nwom - Nwom topsites の index.php における重要な情報を取得される脆弱性 - CVE-2007-0250 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240138 6.8 警告 nwom - Nwom topsites の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0249 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
240139 4.6 警告 lookup - lookup-el の ndeb-binary 機能における任意のファイルを上書きされる脆弱性 - CVE-2007-0237 2012-09-25 15:36 2007-03-19 Show GitHub Exploit DB Packet Storm
240140 7.5 危険 jshop e-commerce - Jshop サーバにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0232 2012-09-25 15:36 2007-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267871 5.5 MEDIUM
Local 		uclouvain
fedoraproject 		openjpeg
fedora 		Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE:… CWE-369
 Divide By Zero 		CVE-2016-4797 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267872 5.5 MEDIUM
Local 		uclouvain
fedoraproject 		openjpeg
fedora 		Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4796 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267873 5.5 MEDIUM
Local 		mini-xml_project
debian 		mini-xml
debian_linux 		The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-4571 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267874 5.5 MEDIUM
Local 		mini-xml_project
debian 		mini-xml
debian_linux 		The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-4570 2024-11-21 11:52 2017-02-4 Show GitHub Exploit DB Packet Storm
267875 7.5 HIGH
Network 		cakephp cakephp The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header. CWE-20
 Improper Input Validation  		CVE-2016-4793 2024-11-21 11:52 2017-01-24 Show GitHub Exploit DB Packet Storm
267876 6.8 MEDIUM
Physics 		cryptsetup_project cryptsetup The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password. CWE-287
Improper Authentication 		CVE-2016-4484 2024-11-21 11:52 2017-01-24 Show GitHub Exploit DB Packet Storm
267877 6.1 MEDIUM
Network 		roundcube webmail Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message. CWE-79
Cross-site Scripting 		CVE-2016-4552 2024-11-21 11:52 2016-12-21 Show GitHub Exploit DB Packet Storm
267878 5.5 MEDIUM
Local 		redhat enterprise_virtualization Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2016-4443 2024-11-21 11:52 2016-12-15 Show GitHub Exploit DB Packet Storm
267879 4.4 MEDIUM
Network 		phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the u… CWE-254
 7PK - Security Features 		CVE-2016-4412 2024-11-21 11:52 2016-12-11 Show GitHub Exploit DB Packet Storm
267880 7.5 HIGH
Network 		hp system_management_homepage HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4396 2024-11-21 11:52 2016-10-29 Show GitHub Exploit DB Packet Storm