Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251471 4.3 警告 arizona-dream - Arizona Dream livor の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1919 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251472 6.8 警告 MyBB Group
ecardmax.com
- eCardMAX Hot Editor および HotEditor プラグインの richedit/keyboard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1906 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251473 4.3 警告 AOL - AIM および ICQ におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1904 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251474 9.3 危険 アカマイテクノロジーズ - Akamai Technologies Download Manager ActiveX コントロール (DownloadManagerV2.ocx) におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1892 2012-06-26 15:46 2007-04-17 Show GitHub Exploit DB Packet Storm
251475 7.2 危険 アドビシステムズ - Adobe ColdFusion MX における任意のコードを実行される脆弱性 - CVE-2007-1874 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251476 4.3 警告 chcounter - chcounter におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1871 2012-06-26 15:46 2007-04-13 Show GitHub Exploit DB Packet Storm
251477 5 警告 drake team - Drake CMS の classes/captcha/captcha.jpg.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1850 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251478 7.5 危険 drake team - Drake CMS の 404.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1849 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251479 4.3 警告 drake team - Drake CMS の admin/classes/ui.dta.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1848 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251480 7.5 危険 avatic - Aardvark Topsites PHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1844 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274841 7.8 HIGH
Local
hancom hancom_office_2014 When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operation that can cause the integer to overfl… CWE-190
 Integer Overflow or Wraparound
CVE-2016-4291 2024-11-21 11:51 2017-01-7 Show GitHub Exploit DB Packet Storm
274842 8.4 HIGH
Local
bluestacks bluestacks A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary pro… CWE-275
 Permission Issues
CVE-2016-4288 2024-11-21 11:51 2017-01-7 Show GitHub Exploit DB Packet Storm
274843 7.8 HIGH
Local
hancom hancom_office_2014 When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a block of data within the file. When calculating thi… CWE-190
 Integer Overflow or Wraparound
CVE-2016-4290 2024-11-21 11:51 2017-01-7 Show GitHub Exploit DB Packet Storm
274844 4.3 MEDIUM
Network
open-xchange open-xchange_appsuite An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Custom messages can be shown at the login screen to notify external users about issues with sharing links. This mechanism can … NVD-CWE-Other
CVE-2016-4048 2024-11-21 11:51 2016-12-15 Show GitHub Exploit DB Packet Storm
274845 4.3 MEDIUM
Network
open-xchange open-xchange_appsuite An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type definitions (.dtd resources) can be placed within .docx and .xslx files. Those re… CWE-200
CWE-611
Information Exposure
XXE
CVE-2016-4047 2024-11-21 11:51 2016-12-15 Show GitHub Exploit DB Packet Storm
274846 5.8 MEDIUM
Network
open-xchange open-xchange_appsuite An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of th… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2016-4046 2024-11-21 11:51 2016-12-15 Show GitHub Exploit DB Packet Storm
274847 6.1 MEDIUM
Network
open-xchange open-xchange_appsuite An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader … CWE-79
Cross-site Scripting
CVE-2016-4045 2024-11-21 11:51 2016-12-15 Show GitHub Exploit DB Packet Storm
274848 7.5 HIGH
Network
open-xchange ox_guard An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle… CWE-255
Credentials Management
CVE-2016-4028 2024-11-21 11:51 2016-12-15 Show GitHub Exploit DB Packet Storm
274849 3.5 LOW
Network
open-xchange open-xchange_appsuite An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a user wants to store cookies that exceed the session duration. This functionalit… CWE-200
Information Exposure
CVE-2016-4027 2024-11-21 11:51 2016-12-15 Show GitHub Exploit DB Packet Storm
274850 6.1 MEDIUM
Network
open-xchange open-xchange_appsuite An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer component has an issue with filtering malicious content in case invalid HTML code is provided. In such c… CWE-79
Cross-site Scripting
CVE-2016-4026 2024-11-21 11:51 2016-12-15 Show GitHub Exploit DB Packet Storm