Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240731	7.5	危険	php labs	-	PHP Labs JobSitePro の search.php における SQL インジェクションの脆弱性	-	CVE-2007-1428	2012-09-25 16:47	2007-03-12	Show	GitHub Exploit DB Packet Storm

240732	4.3	警告	mindtouch	-	MindTouch OpenGarden DekiWiki におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-1418	2012-09-25 16:47	2007-03-12	Show	GitHub Exploit DB Packet Storm

240733	7.5	危険	hc design	-	HC NEWSSYSTEM の index.php における SQL インジェクションの脆弱性	-	CVE-2007-1417	2012-09-25 16:47	2007-03-12	Show	GitHub Exploit DB Packet Storm

240734	10	危険	jccorp	-	JCcorp URLshrink の createurl.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1416	2012-09-25 16:47	2007-03-12	Show	GitHub Exploit DB Packet Storm

240735	7.5	危険	The PHP Group	-	PHP の snmp エクステンションにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-1413	2012-09-25 16:47	2007-03-12	Show	GitHub Exploit DB Packet Storm

240736	7.8	危険	The PHP Group	-	PHP の ClibPDF エクステンションにおける重要な情報を取得される脆弱性	-	CVE-2007-1412	2012-09-25 16:47	2007-03-12	Show	GitHub Exploit DB Packet Storm

240737	6.8	警告	The PHP Group	-	PHP におけるバッファオーバーフローの脆弱性	-	CVE-2007-1411	2012-09-25 16:47	2007-03-10	Show	GitHub Exploit DB Packet Storm

240738	7.5	危険	OpenSolution	-	OpenSolution Quick.Cart における脆弱性	-	CVE-2007-1407	2012-09-25 16:47	2007-03-7	Show	GitHub Exploit DB Packet Storm

240739	7.5	危険	macromedia	-	Macromedia Shockwave の SwDir.dll におけるスタックベースバッファオーバーフローの脆弱性	-	CVE-2007-1403	2012-09-25 16:47	2007-03-10	Show	GitHub Exploit DB Packet Storm

240740	6.9	警告	The PHP Group	-	PHP にバンドルされているクラックエクステンションにおけるバッファオーバーフローの脆弱性	-	CVE-2007-1401	2012-09-25 16:47	2007-03-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266051	7.2	HIGH Network	broadcom	advanced_secure_gateway symantec_proxysg	The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain c…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9097	2024-11-21 12:00	2017-05-11	Show	GitHub Exploit DB Packet Storm

266052	8.8	HIGH Network	symantec	content_analysis mail_threat_defense	The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote atta…	CWE-352 Origin Validation Error	CVE-2016-9092	2024-11-21 12:00	2017-05-11	Show	GitHub Exploit DB Packet Storm

266053	7.5	HIGH Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9250	2024-11-21 12:00	2017-05-10	Show	GitHub Exploit DB Packet Storm

266054	6.1	MEDIUM Network	f5	big-ip_access_policy_manager	In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when …	CWE-79 Cross-site Scripting	CVE-2016-9257	2024-11-21 12:00	2017-05-10	Show	GitHub Exploit DB Packet Storm

266055	7.5	HIGH Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are chan…	CWE-362 Race Condition	CVE-2016-9256	2024-11-21 12:00	2017-05-10	Show	GitHub Exploit DB Packet Storm

266056	7.5	HIGH Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile.	CWE-20 Improper Input Validation	CVE-2016-9253	2024-11-21 12:00	2017-05-10	Show	GitHub Exploit DB Packet Storm

266057	8.8	HIGH Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-9251	2024-11-21 12:00	2017-05-10	Show	GitHub Exploit DB Packet Storm

266058	5.5	MEDIUM Local	ibm	tivoli_storage_manager	IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.	CWE-200 Information Exposure	CVE-2016-8916	2024-11-21 12:00	2017-05-6	Show	GitHub Exploit DB Packet Storm

266059	5.9	MEDIUM Network	ibm	bigfix_inventory	IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851.	CWE-255 Credentials Management	CVE-2016-8962	2024-11-21 12:00	2017-04-27	Show	GitHub Exploit DB Packet Storm

266060	5.6	MEDIUM Network	ibm	maximo_asset_management	IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit th…	CWE-79 Cross-site Scripting	CVE-2016-8924	2024-11-21 12:00	2017-04-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed