Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250561 4.3 警告 boesch-it - SimpGB における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2007-5130 2012-06-26 15:54 2007-09-27 Show GitHub Exploit DB Packet Storm
250562 5 警告 boesch-it - SimpGB における任意の .inc ファイルをダウンロードされる脆弱性 CWE-200
CWE-DesignError
CVE-2007-5129 2012-06-26 15:54 2007-09-27 Show GitHub Exploit DB Packet Storm
250563 5 警告 The PHP Group
boesch-it
- Windows 上の SimpNews における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2007-5128 2012-06-26 15:54 2007-09-27 Show GitHub Exploit DB Packet Storm
250564 6.8 警告 AOL - Internet Explorer サーバコントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-5124 2012-06-26 15:54 2007-09-27 Show GitHub Exploit DB Packet Storm
250565 9.3 危険 FrontAccounting - FA における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5117 2012-06-26 15:54 2007-09-27 Show GitHub Exploit DB Packet Storm
250566 7.5 危険 ekke doerre - pdf4cms の contenido_hacks における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5115 2012-06-26 15:54 2007-09-14 Show GitHub Exploit DB Packet Storm
250567 4.3 警告 eb design pty ltd - EB Design ebCrypt の ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-5111 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
250568 7.5 危険 eb design pty ltd - EB Design ebCrypt の EbCrypt.eb_c_PRNGenerator.1 ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5110 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
250569 4.3 警告 flatnuke - FlatNuke の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-5109 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
250570 10 危険 ask.com - IAC Search & Media ask.com toolbar における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2007-5108 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273511 9.8 CRITICAL
Network
php php The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-6291 2024-11-21 11:55 2016-07-25 Show GitHub Exploit DB Packet Storm
273512 9.8 CRITICAL
Network
php php ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of serv… CWE-416
 Use After Free
CVE-2016-6290 2024-11-21 11:55 2016-07-25 Show GitHub Exploit DB Packet Storm
273513 7.8 HIGH
Local
php php Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack… CWE-190
 Integer Overflow or Wraparound
CVE-2016-6289 2024-11-21 11:55 2016-07-25 Show GitHub Exploit DB Packet Storm
273514 9.8 CRITICAL
Network
php php The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-6288 2024-11-21 11:55 2016-07-25 Show GitHub Exploit DB Packet Storm
273515 6.1 MEDIUM
Network
siemens sinema_remote_connect_server Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted U… CWE-79
Cross-site Scripting
CVE-2016-6204 2024-11-21 11:55 2016-07-23 Show GitHub Exploit DB Packet Storm
273516 7.5 HIGH
Network
siemens simatic_net_pc-software Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service (OPC UA service outage) via crafted TCP packets. CWE-20
 Improper Input Validation 
CVE-2016-5874 2024-11-21 11:55 2016-07-23 Show GitHub Exploit DB Packet Storm
273517 3.3 LOW
Local
ecryptfs
canonical
ecryptfs-utils
ubuntu_linux
ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obt… CWE-20
 Improper Input Validation 
CVE-2016-6224 2024-11-21 11:55 2016-07-22 Show GitHub Exploit DB Packet Storm
273518 8.1 HIGH
Network
tollgrade lighthouse_sms Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct reques… CWE-284
Improper Access Control
CVE-2016-5807 2024-11-21 11:55 2016-07-16 Show GitHub Exploit DB Packet Storm
273519 9.8 CRITICAL
Network
moxa mgate_mb3180_firmware
mgate_mb3280_firmware
mgate_mb3480_firmware
mgate_mb3170_firmware
mgate_mb3270_firmware
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authe… CWE-326
Inadequate Encryption Strength
CVE-2016-5804 2024-11-21 11:55 2016-07-16 Show GitHub Exploit DB Packet Storm
273520 5.3 MEDIUM
Network
tollgrade lighthouse_sms Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate a… CWE-200
Information Exposure
CVE-2016-5797 2024-11-21 11:55 2016-07-16 Show GitHub Exploit DB Packet Storm