Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240131 1.7 注意 オラクル - Oracle Enterprise Manager における脆弱性 - CVE-2007-0294 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240132 6.4 警告 オラクル - Oracle Enterprise Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2007-0293 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240133 7.5 危険 オラクル - Oracle Enterprise Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2007-0292 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240134 4 警告 オラクル - Oracle E-Business Suite and Applications における脆弱性 - CVE-2007-0291 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240135 5.5 警告 オラクル - Oracle E-Business Suite and Applications における脆弱性 - CVE-2007-0290 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240136 6.4 警告 オラクル - Oracle Collaboration Suite における脆弱性 - CVE-2007-0289 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240137 5 警告 nwom - Nwom topsites の index.php における重要な情報を取得される脆弱性 - CVE-2007-0250 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
240138 6.8 警告 nwom - Nwom topsites の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0249 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
240139 4.6 警告 lookup - lookup-el の ndeb-binary 機能における任意のファイルを上書きされる脆弱性 - CVE-2007-0237 2012-09-25 15:36 2007-03-19 Show GitHub Exploit DB Packet Storm
240140 7.5 危険 jshop e-commerce - Jshop サーバにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0232 2012-09-25 15:36 2007-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268131 9.8 CRITICAL
Network 		php
opensuse
fedoraproject 		php
leap
fedora 		The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segment… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4539 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
268132 9.8 CRITICAL
Network 		php
fedoraproject
opensuse 		php
fedora
leap 		The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_… CWE-20
 Improper Input Validation  		CVE-2016-4538 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
268133 9.8 CRITICAL
Network 		php
opensuse
fedoraproject 		php
leap
fedora 		The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause … CWE-20
 Improper Input Validation  		CVE-2016-4537 2024-11-21 11:52 2016-05-22 Show GitHub Exploit DB Packet Storm
268134 6.0 MEDIUM
Local 		qemu
canonical
debian 		qemu
ubuntu_linux
debian_linux 		The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of servi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4441 2024-11-21 11:52 2016-05-20 Show GitHub Exploit DB Packet Storm
268135 6.7 MEDIUM
Local 		canonical
qemu
debian 		ubuntu_linux
qemu
debian_linux 		The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4439 2024-11-21 11:52 2016-05-20 Show GitHub Exploit DB Packet Storm
268136 8.4 HIGH
Local 		oracle
xen 		vm_server
xen 		The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-4480 2024-11-21 11:52 2016-05-18 Show GitHub Exploit DB Packet Storm
268137 7.5 HIGH
Network 		jansson_project jansson Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data. CWE-20
 Improper Input Validation  		CVE-2016-4425 2024-11-21 11:52 2016-05-17 Show GitHub Exploit DB Packet Storm
268138 5.3 MEDIUM
Network 		openafs openafs The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow… CWE-200
Information Exposure 		CVE-2016-4536 2024-11-21 11:52 2016-05-14 Show GitHub Exploit DB Packet Storm
268139 4.2 MEDIUM
Local 		panasonic fpwin_pro Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (application crash) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4499 2024-11-21 11:52 2016-05-12 Show GitHub Exploit DB Packet Storm
268140 5.5 MEDIUM
Network 		panasonic fpwin_pro Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors. CWE-20
 Improper Input Validation  		CVE-2016-4498 2024-11-21 11:52 2016-05-12 Show GitHub Exploit DB Packet Storm