Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251471 4.3 警告 arizona-dream - Arizona Dream livor の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1919 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251472 6.8 警告 MyBB Group
ecardmax.com		 - eCardMAX Hot Editor および HotEditor プラグインの richedit/keyboard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1906 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251473 4.3 警告 AOL - AIM および ICQ におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1904 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251474 9.3 危険 アカマイテクノロジーズ - Akamai Technologies Download Manager ActiveX コントロール (DownloadManagerV2.ocx) におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1892 2012-06-26 15:46 2007-04-17 Show GitHub Exploit DB Packet Storm
251475 7.2 危険 アドビシステムズ - Adobe ColdFusion MX における任意のコードを実行される脆弱性 - CVE-2007-1874 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251476 4.3 警告 chcounter - chcounter におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1871 2012-06-26 15:46 2007-04-13 Show GitHub Exploit DB Packet Storm
251477 5 警告 drake team - Drake CMS の classes/captcha/captcha.jpg.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1850 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251478 7.5 危険 drake team - Drake CMS の 404.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1849 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251479 4.3 警告 drake team - Drake CMS の admin/classes/ui.dta.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1848 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251480 7.5 危険 avatic - Aardvark Topsites PHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1844 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275351 7.8 HIGH
Local 		google android omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer port, which allows… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3824 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
275352 7.8 HIGH
Local 		google android The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3823 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
275353 7.8 HIGH
Local 		google
debian 		android
debian_linux 		exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3822 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
275354 9.8 CRITICAL
Network 		google android libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arb… CWE-476
 NULL Pointer Dereference 		CVE-2016-3821 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
275355 9.8 CRITICAL
Network 		google android The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3820 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
275356 9.8 CRITICAL
Network 		google android Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3819 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
275357 5.5 MEDIUM
Local 		sap hana_db The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispa… CWE-200
Information Exposure 		CVE-2016-3640 2024-11-21 11:50 2016-08-5 Show GitHub Exploit DB Packet Storm
275358 9.8 CRITICAL
Network 		redhat jboss_operations_network The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. CWE-20
 Improper Input Validation  		CVE-2016-3737 2024-11-21 11:50 2016-08-2 Show GitHub Exploit DB Packet Storm
275359 5.3 MEDIUM
Network 		oracle
mariadb
ibm
debian
canonical 		linux
mariadb
mysql
powerkvm
debian_linux
ubuntu_linux 		Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote auth… NVD-CWE-noinfo
CVE-2016-3615 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm
275360 5.3 MEDIUM
Network 		oracle
canonical 		mysql
ubuntu_linux 		Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption. NVD-CWE-noinfo
CVE-2016-3614 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm