Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240511 7.5 危険 FreeWebshop - FreeWebshop の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6466 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
240512 4.3 警告 Ganglia - Ganglia の ganglia-web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6465 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
240513 6.8 警告 form tools - Form ツールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6464 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
240514 4.3 警告 Flyspray - Flyspray の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6461 2012-06-26 15:54 2007-12-9 Show GitHub Exploit DB Packet Storm
240515 4.3 警告 anon proxy server - Anon Proxy Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6460 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
240516 6.8 警告 anon proxy server - Anon Proxy Server における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6459 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
240517 5 警告 balabit - Balabit syslog-ng におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6437 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
240518 9.3 危険 guliverkli
3ivx		 - MPC の mplayerc.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6402 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240519 9.3 危険 マイクロソフト
3ivx		 - WMP の mplayer2.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6401 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240520 5 警告 flat php - Flat PHP Board における任意のユーザアカウントへの制限されたアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2007-6398 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 27, 2026, 1:20 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256641 7.8 HIGH
Local 		bmc patrol In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9638 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
256642 9.8 CRITICAL
Network 		alcatel-lucent omnivista_8770_network_management_system Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista i… CWE-287
CWE-264
Improper Authentication
Permissions, Privileges, and Access Controls 		CVE-2016-9796 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
256643 7.5 HIGH
Network 		b2evolution b2evolution The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request. CWE-255
Credentials Management 		CVE-2016-9479 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
256644 8.6 HIGH
Network 		s9y serendipity In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2016-9752 2024-11-21 12:01 2016-12-1 Show GitHub Exploit DB Packet Storm
256645 6.1 MEDIUM
Network 		piwigo piwigo Cross-site scripting (XSS) vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2016-9751 2024-11-21 12:01 2016-12-1 Show GitHub Exploit DB Packet Storm
256646 7.5 HIGH
Network 		boa boa Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters. CWE-20
 Improper Input Validation  		CVE-2016-9564 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
256647 9.8 CRITICAL
Network 		exponentcms exponent_cms In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is defined in the expCommentControllercontr… CWE-89
SQL Injection 		CVE-2016-9481 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
256648 9.1 CRITICAL
Network 		libdwarf_project libdwarf libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9480 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
256649 7.8 HIGH
Local 		linux linux_kernel The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9644 2024-11-21 12:01 2016-11-28 Show GitHub Exploit DB Packet Storm
256650 9.8 CRITICAL
Network 		linux linux_kernel The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-… CWE-125
Out-of-bounds Read 		CVE-2016-9555 2024-11-21 12:01 2016-11-28 Show GitHub Exploit DB Packet Storm