Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240131	7.5	危険	nazarkin.name	-	Weatimages の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1999	2012-09-25 16:47	2007-04-12	Show	GitHub Exploit DB Packet Storm

240132	7.5	危険	hiox india	-	HGB における任意の PHP コードを挿入される脆弱性	-	CVE-2007-1998	2012-09-25 16:47	2007-04-12	Show	GitHub Exploit DB Packet Storm

240133	7.5	危険	mamboxchange	-	Mambo 用の com_zoom モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1992	2012-09-25 16:47	2007-04-12	Show	GitHub Exploit DB Packet Storm

240134	7.5	危険	lite-cms	-	lite-cms の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1984	2012-09-25 16:47	2007-04-11	Show	GitHub Exploit DB Packet Storm

240135	7.8	危険	metamod-p	-	Metamod-P の safevoid_vsnprintf 機能におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-1981	2012-09-25 16:47	2007-04-11	Show	GitHub Exploit DB Packet Storm

240136	7.5	危険	nick jones	-	Topliste モジュールの index.php における SQL インジェクションの脆弱性	-	CVE-2007-1980	2012-09-25 16:47	2007-04-11	Show	GitHub Exploit DB Packet Storm

240137	7.5	危険	PHP-Fusion	-	PHP-Fusion 用の Arcade モジュールにおける SQL インジェクションの脆弱性	-	CVE-2007-1978	2012-09-25 16:47	2007-04-11	Show	GitHub Exploit DB Packet Storm

240138	4.3	警告	holacms	-	holaCMS の index_cms.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-1977	2012-09-25 16:47	2007-04-11	Show	GitHub Exploit DB Packet Storm

240139	6.9	警告	マイクロソフト	-	Microsoft Windows NT 4.0 の Windows Kernel における権限を取得される脆弱性	-	CVE-2007-1973	2012-09-25 16:47	2007-04-11	Show	GitHub Exploit DB Packet Storm

240140	5	警告	Mozilla Foundation	-	Mozilla Firefox におけるフィッシング攻撃を実行される脆弱性	-	CVE-2007-1970	2012-09-25 16:47	2007-04-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268691	7.5	HIGH Network	apache	http_server	The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allow…	CWE-284 Improper Access Control	CVE-2016-4979	2024-11-21 11:53	2016-07-6	Show	GitHub Exploit DB Packet Storm

268692	6.1	MEDIUM Network	phpmyadmin opensuse	phpmyadmin opensuse	Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mish…	CWE-79 Cross-site Scripting	CVE-2016-5099	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268693	5.3	MEDIUM Network	phpmyadmin opensuse	phpmyadmin opensuse	Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.	CWE-22 Path Traversal	CVE-2016-5098	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268694	5.3	MEDIUM Network	opensuse phpmyadmin	opensuse phpmyadmin	phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by readin…	CWE-200 Information Exposure	CVE-2016-5097	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268695	7.5	HIGH Network	ntp oracle novell suse opensuse	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse	ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.	CWE-476 NULL Pointer Dereference	CVE-2016-4957	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268696	5.3	MEDIUM Network	ntp oracle novell suse opensuse siemens	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware	ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists beca…	NVD-CWE-noinfo	CVE-2016-4956	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268697	5.9	MEDIUM Network	ntp oracle novell suse opensuse siemens	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware	ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packe…	CWE-362 Race Condition	CVE-2016-4955	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268698	7.5	HIGH Network	ntp oracle suse opensuse siemens	ntp solaris linux_enterprise_server openstack_cloud manager_proxy manager linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware tim_4r-ie_firmware<…	ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at…	CWE-287 Improper Authentication	CVE-2016-4953	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268699	7.5	HIGH Network	ntp oracle suse opensuse siemens	ntp solaris linux_enterprise_server openstack_cloud manager_proxy manager linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware tim_4r-ie_firmware<…	The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many sou…	CWE-362 Race Condition	CVE-2016-4954	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

268700	7.1	HIGH Local	linux oracle canonical	linux_kernel linux ubuntu_linux	The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sens…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4998	2024-11-21 11:53	2016-07-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed