Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240711 4.3 警告 liqua - WBBlog の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1482 2012-09-25 16:47 2007-03-16 Show GitHub Exploit DB Packet Storm
240712 5 警告 mcgallery - McGallery の download.php におけるスクリプトソースコードを取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1478 2012-09-25 16:47 2007-03-16 Show GitHub Exploit DB Packet Storm
240713 5.4 警告 The PHP Group - PHP の interbase エクステンションにおけるバッファオーバーフローの脆弱性 - CVE-2007-1475 2012-09-25 16:47 2007-03-16 Show GitHub Exploit DB Packet Storm
240714 6.8 警告 Horde - Horde Project Horde における任意のファイルを削除される脆弱性 - CVE-2007-1474 2012-09-25 16:47 2007-03-14 Show GitHub Exploit DB Packet Storm
240715 4.3 警告 Horde - Horde Framework の framework/NLS/NLS.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1473 2012-09-25 16:47 2007-03-14 Show GitHub Exploit DB Packet Storm
240716 7.5 危険 orion-blog - Orion-Blog の admin/default.asp における権限を取得され脆弱性 - CVE-2007-1471 2012-09-25 16:47 2007-03-16 Show GitHub Exploit DB Packet Storm
240717 6.8 警告 netsw - LIBFtp におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-1470 2012-09-25 16:47 2007-03-16 Show GitHub Exploit DB Packet Storm
240718 4.3 警告 IBM - IBM Rational CQ Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1468 2012-09-25 16:47 2007-03-16 Show GitHub Exploit DB Packet Storm
240719 6.8 警告 Inkscape - Inkscape の whiteboard Jabber プロトコルにおけるフォーマットストリングの脆弱性 - CVE-2007-1464 2012-09-25 16:47 2007-03-21 Show GitHub Exploit DB Packet Storm
240720 6.8 警告 Inkscape - Inkscape におけるフォーマットストリングの脆弱性 - CVE-2007-1463 2012-09-25 16:47 2007-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266021 6.1 MEDIUM
Network 		mybb mybb
merge_system 		Cross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script… CWE-79
Cross-site Scripting 		CVE-2016-9405 2024-11-21 12:01 2017-02-1 Show GitHub Exploit DB Packet Storm
266022 6.1 MEDIUM
Network 		mybb mybb
merge_system 		Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors … CWE-79
Cross-site Scripting 		CVE-2016-9404 2024-11-21 12:01 2017-02-1 Show GitHub Exploit DB Packet Storm
266023 9.8 CRITICAL
Network 		mybb mybb
merge_system 		newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impact by leveraging a missing permission check. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9403 2024-11-21 12:01 2017-02-1 Show GitHub Exploit DB Packet Storm
266024 9.8 CRITICAL
Network 		mybb mybb
merge_system 		SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to execute arbitrary SQL commands via uns… CWE-89
SQL Injection 		CVE-2016-9402 2024-11-21 12:01 2017-02-1 Show GitHub Exploit DB Packet Storm
266025 7.2 HIGH
Network 		sophos web_appliance The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occu… CWE-77
Command Injection 		CVE-2016-9554 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
266026 7.2 HIGH
Network 		sophos web_appliance The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative interface. These vulnerabilities occur in the MgrReport.php (… CWE-77
Command Injection 		CVE-2016-9553 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
266027 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9636 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
266028 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9635 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
266029 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9634 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
266030 7.8 HIGH
Local 		libtiff
opensuse
debian 		libtiff
opensuse
debian_linux 		The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIF… CWE-787
 Out-of-bounds Write 		CVE-2016-9453 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm