Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251551 6.8 警告 cicoandcico - Cicoandcico CcMail の functions/update.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1516 2012-06-26 15:46 2007-03-20 Show GitHub Exploit DB Packet Storm
251552 6.8 警告 grafx - CWB PRO の comanda.php における PHP リモートファイルインクルーションの脆弱性 - CVE-2007-1513 2012-06-26 15:46 2007-03-20 Show GitHub Exploit DB Packet Storm
251553 7.1 危険 frontbase - FrontBase Relational Database Server におけるバッファオーバーフローの脆弱性 - CVE-2007-1511 2012-06-26 15:46 2007-03-20 Show GitHub Exploit DB Packet Storm
251554 9.3 危険 avant force - Avant Browser におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1501 2012-06-26 15:46 2007-03-19 Show GitHub Exploit DB Packet Storm
251555 4.3 警告 Gentoo Linux - LSAT における任意のファイルを上書きされる脆弱性 - CVE-2007-1500 2012-06-26 15:46 2007-03-18 Show GitHub Exploit DB Packet Storm
251556 5.2 警告 アバイア - 複数の Avaya 製品で使用されている Apache Tomcat における外部から攻撃される脆弱性 - CVE-2007-1491 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
251557 6 警告 アバイア - 複数の Avaya 製品における任意のコマンドを実行される脆弱性 - CVE-2007-1490 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
251558 5 警告 cyber inside
sascha schroeder
cyberteddy
- Sascha Schroeder WebLog の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1487 2012-06-26 15:46 2007-03-16 Show GitHub Exploit DB Packet Storm
251559 10 危険 carbonize - Carbonize Lazarus Guestbook の template.class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1486 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
251560 7.5 危険 creative guestbook - Creative Guestbook における管理アカウントを追加される脆弱性 CWE-287
不適切な認証
CVE-2007-1480 2012-06-26 15:46 2007-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274411 4.3 MEDIUM
Network
zulip zulip In zulip before 1.3.12, bot API keys were accessible to other users in the same realm. NVD-CWE-noinfo
CVE-2016-4426 2024-11-21 11:52 2022-07-29 Show GitHub Exploit DB Packet Storm
274412 9.8 CRITICAL
Network
haxx curl Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass … NVD-CWE-noinfo
CVE-2016-4606 2024-11-21 11:52 2020-02-21 Show GitHub Exploit DB Packet Storm
274413 7.5 HIGH
Network
apple mac_os_x
safari
A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information. CWE-200
Information Exposure
CVE-2016-4676 2024-11-21 11:52 2020-02-4 Show GitHub Exploit DB Packet Storm
274414 8.8 HIGH
Network
webkitgtk
canonical
webkitgtk\+
ubuntu_linux
WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS CWE-416
 Use After Free
CVE-2016-4761 2024-11-21 11:52 2020-01-23 Show GitHub Exploit DB Packet Storm
274415 8.8 HIGH
Network
cloudera cdh In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. CWE-863
 Incorrect Authorization
CVE-2016-4572 2024-11-21 11:52 2019-11-26 Show GitHub Exploit DB Packet Storm
274416 9.8 CRITICAL
Network
arubanetworks clearpass Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials. CWE-522
 Insufficiently Protected Credentials
CVE-2016-4401 2024-11-21 11:52 2019-11-7 Show GitHub Exploit DB Packet Storm
274417 6.5 MEDIUM
Network
apple iphone_os
mac_os
apple_tv
In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue … CWE-200
Information Exposure
CVE-2016-4644 2024-11-21 11:52 2019-01-12 Show GitHub Exploit DB Packet Storm
274418 6.5 MEDIUM
Network
apple iphone_os
mac_os
apple_tv
In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through … CWE-200
Information Exposure
CVE-2016-4643 2024-11-21 11:52 2019-01-12 Show GitHub Exploit DB Packet Storm
274419 5.9 MEDIUM
Network
apple iphone_os
mac_os
apple_tv
In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This is… CWE-254
 7PK - Security Features
CVE-2016-4642 2024-11-21 11:52 2019-01-12 Show GitHub Exploit DB Packet Storm
274420 6.1 MEDIUM
Network
hp integrated_lights-out_3_firmware
integrated_lights-out_4_firmware
A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44. CWE-79
Cross-site Scripting
CVE-2016-4406 2024-11-21 11:52 2018-08-7 Show GitHub Exploit DB Packet Storm