Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240731 7.5 危険 Moodle - Moodle における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1429 2012-09-25 16:47 2007-03-12 Show GitHub Exploit DB Packet Storm
240732 7.5 危険 php labs - PHP Labs JobSitePro の search.php における SQL インジェクションの脆弱性 - CVE-2007-1428 2012-09-25 16:47 2007-03-12 Show GitHub Exploit DB Packet Storm
240733 4.3 警告 mindtouch - MindTouch OpenGarden DekiWiki におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1418 2012-09-25 16:47 2007-03-12 Show GitHub Exploit DB Packet Storm
240734 7.5 危険 hc design - HC NEWSSYSTEM の index.php における SQL インジェクションの脆弱性 - CVE-2007-1417 2012-09-25 16:47 2007-03-12 Show GitHub Exploit DB Packet Storm
240735 10 危険 jccorp - JCcorp URLshrink の createurl.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1416 2012-09-25 16:47 2007-03-12 Show GitHub Exploit DB Packet Storm
240736 7.5 危険 The PHP Group - PHP の snmp エクステンションにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-1413 2012-09-25 16:47 2007-03-12 Show GitHub Exploit DB Packet Storm
240737 7.8 危険 The PHP Group - PHP の ClibPDF エクステンションにおける重要な情報を取得される脆弱性 - CVE-2007-1412 2012-09-25 16:47 2007-03-12 Show GitHub Exploit DB Packet Storm
240738 6.8 警告 The PHP Group - PHP におけるバッファオーバーフローの脆弱性 - CVE-2007-1411 2012-09-25 16:47 2007-03-10 Show GitHub Exploit DB Packet Storm
240739 7.5 危険 OpenSolution - OpenSolution Quick.Cart における脆弱性 - CVE-2007-1407 2012-09-25 16:47 2007-03-7 Show GitHub Exploit DB Packet Storm
240740 7.5 危険 macromedia - Macromedia Shockwave の SwDir.dll におけるスタックベースバッファオーバーフローの脆弱性 - CVE-2007-1403 2012-09-25 16:47 2007-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265991 9.8 CRITICAL
Network
exponentcms exponent_cms Exponent CMS before 2.6.0 has improper input validation in usersController.php. CWE-20
 Improper Input Validation 
CVE-2016-9022 2024-11-21 12:00 2020-12-31 Show GitHub Exploit DB Packet Storm
265992 9.8 CRITICAL
Network
exponentcms exponent_cms Exponent CMS before 2.6.0 has improper input validation in storeController.php. CWE-20
 Improper Input Validation 
CVE-2016-9021 2024-11-21 12:00 2020-12-31 Show GitHub Exploit DB Packet Storm
265993 5.4 MEDIUM
Network
cloudera cloudera_manager Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the help search feature. CWE-79
Cross-site Scripting
CVE-2016-9271 2024-11-21 12:00 2019-11-27 Show GitHub Exploit DB Packet Storm
265994 9.8 CRITICAL
Network
exponentcms exponent_cms Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to change_tags. CWE-74
Injection
CVE-2016-8900 2024-11-21 12:00 2019-05-25 Show GitHub Exploit DB Packet Storm
265995 9.8 CRITICAL
Network
exponentcms exponent_cms Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php. CWE-89
SQL Injection
CVE-2016-8898 2024-11-21 12:00 2019-05-25 Show GitHub Exploit DB Packet Storm
265996 9.8 CRITICAL
Network
exponentcms exponent_cms Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to change_cats. CWE-74
Injection
CVE-2016-8899 2024-11-21 12:00 2019-05-24 Show GitHub Exploit DB Packet Storm
265997 9.8 CRITICAL
Network
exponentcms exponent_cms Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php. CWE-89
SQL Injection
CVE-2016-8897 2024-11-21 12:00 2019-05-24 Show GitHub Exploit DB Packet Storm
265998 9.8 CRITICAL
Network
b2evolution b2evolution b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php. CWE-74
Injection
CVE-2016-8901 2024-11-21 12:00 2019-05-24 Show GitHub Exploit DB Packet Storm
265999 7.5 HIGH
Network
microfocus netiq_edirectory NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-9166 2024-11-21 12:00 2019-03-22 Show GitHub Exploit DB Packet Storm
266000 7.8 HIGH
Local
mozilla firefox A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox < 50. CWE-416
 Use After Free
CVE-2016-9069 2024-11-21 12:00 2018-10-18 Show GitHub Exploit DB Packet Storm