Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240151	7.5	危険	mitisoft	-	MitiSoft におけるパスワードを含むデータベースをダウンロードされる脆弱性	-	CVE-2007-0151	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240152	6.8	警告	omnigroup	-	OmniGroup OmniWeb におけるフォーマットストリングの脆弱性	-	CVE-2007-0148	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240153	6.8	警告	nune	-	NUNE News Script における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-0143	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240154	7.5	危険	kolayindir download	-	Yenionline の down.asp における SQL インジェクションの脆弱性	-	CVE-2007-0140	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240155	7.5	危険	ヒューレット・パッカード	-	OpenVMS 用の DECnet-Plus における "データおよびシステムリソースへの予期しない特権的アクセス" を取得される脆弱性	-	CVE-2007-0139	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240156	7.5	危険	igeneric	-	iGeneric の iG Shop における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-0134	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240157	7.5	危険	igeneric	-	iGeneric の iG Shop の display_review.php における SQL インジェクションの脆弱性	-	CVE-2007-0133	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240158	7.5	危険	igeneric	-	iGeneric の iG Shop の compare_product.php における SQL インジェクションの脆弱性	-	CVE-2007-0132	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240159	7.5	危険	JAMWiki	-	JAMWiki における wiki への不正な変更を実施される脆弱性	-	CVE-2007-0131	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

240160	7.5	危険	igeneric	-	iGeneric の iG Calendar の user.php における SQL インジェクションの脆弱性	-	CVE-2007-0130	2012-09-25 15:36	2007-01-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267821	6.7	MEDIUM Local	oracle xen	vm_server xen	The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-4962	2024-11-21 11:53	2016-06-7	Show	GitHub Exploit DB Packet Storm

267822	6.1	MEDIUM Network	markdown_on_saved_improved_project	markdown_on_saved_improved	Cross-site scripting (XSS) vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-4812	2024-11-21 11:53	2016-06-5	Show	GitHub Exploit DB Packet Storm

267823	6.2	MEDIUM Local	dosfstools_project opensuse canonical	dosfstools leap opensuse ubuntu_linux	The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_f…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4804	2024-11-21 11:53	2016-06-3	Show	GitHub Exploit DB Packet Storm

267824	7.8	HIGH Local	qemu canonical oracle debian redhat	qemu ubuntu_linux linux debian_linux enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_server o…	Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code vi…	CWE-787 Out-of-bounds Write	CVE-2016-5126	2024-11-21 11:53	2016-06-2	Show	GitHub Exploit DB Packet Storm

267825	6.1	MEDIUM Network	citrix	netscaler_gateway_11.0_firmware	Cross-site scripting (XSS) vulnerability in vpn/js/gateway_login_form_view.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via th…	CWE-79 Cross-site Scripting	CVE-2016-4945	2024-11-21 11:53	2016-06-2	Show	GitHub Exploit DB Packet Storm

267826	7.5	HIGH Network	citrix	xenapp xendesktop	Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Con…	CWE-284 Improper Access Control	CVE-2016-4810	2024-11-21 11:53	2016-06-2	Show	GitHub Exploit DB Packet Storm

267827	7.8	HIGH Local	linux canonical oracle	linux_kernel ubuntu_linux linux	The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service (NULL pointer dereference a…	NVD-CWE-Other	CVE-2016-4951	2024-11-21 11:53	2016-05-23	Show	GitHub Exploit DB Packet Storm

267828	7.8	HIGH Local	canonical linux oracle novell	ubuntu_linux linux_kernel linux suse_linux_enterprise_server suse_linux_enterprise_debuginfo suse_linux_enterprise_software_development_kit	The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensit…	CWE-200 Information Exposure	CVE-2016-4913	2024-11-21 11:53	2016-05-23	Show	GitHub Exploit DB Packet Storm

267829	7.8	HIGH Local	novell redhat canonical linux oracle	suse_linux_enterprise_desktop suse_linux_enterprise_workstation_extension suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server opensuse_leap suse_linux_enterprise…	Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or pos…	CWE-416 Use After Free	CVE-2016-4805	2024-11-21 11:53	2016-05-23	Show	GitHub Exploit DB Packet Storm

267830	7.5	HIGH Network	zulip	zulip	In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.	NVD-CWE-noinfo	CVE-2016-4427	2024-11-21 11:52	2022-07-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed