Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193651 4.3 警告
Network 		IBM - IBM Connections におけるリンクを改ざんされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-0308 2017-02-21 16:43 2016-08-9 Show GitHub Exploit DB Packet Storm
193652 4.3 警告
Network 		IBM - IBM Connections における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-0307 2017-02-21 16:43 2016-08-9 Show GitHub Exploit DB Packet Storm
193653 5.4 警告
Network 		IBM - IBM Connections におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0305 2017-02-21 16:43 2016-08-9 Show GitHub Exploit DB Packet Storm
193654 5.3 警告
Network 		IBM - IBM Security Key Lifecycle Manager における認証されていないユーザに対して重要な情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-6099 2017-02-21 16:37 2016-06-29 Show GitHub Exploit DB Packet Storm
193655 8.1 重要
Network 		IBM - IBM InfoSphere Information Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2016-6059 2017-02-21 16:36 2016-10-28 Show GitHub Exploit DB Packet Storm
193656 5 警告
Network 		IBM - IBM Jazz Foundation における以前にログインしたユーザを継承される脆弱性 CWE-384
セッションの固定化 		CVE-2016-6040 2017-02-21 16:35 2016-12-16 Show GitHub Exploit DB Packet Storm
193657 6.1 警告
Network 		IBM - IBM TRIRIGA Application Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6000 2017-02-21 16:32 2016-10-17 Show GitHub Exploit DB Packet Storm
193658 6.5 警告
Adjacent 		IBM - IBM BigFix Platform における BES をクラッシュ状態にされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6085 2017-02-21 16:31 2016-12-20 Show GitHub Exploit DB Packet Storm
193659 10 緊急
Network 		IBM - IBM BigFix Platform におけるシステム上で任意のコードを実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2016-6082 2017-02-21 16:31 2016-12-20 Show GitHub Exploit DB Packet Storm
193660 4.3 警告
Network 		IBM - IBM Kenexa LMS on Cloud における認証されたユーザに対する応答において秘密の質問の解答を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-6122 2017-02-21 16:28 2016-11-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294221 - sh-news sh-news SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2007-6391 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294222 - dominion_web dwdirectory SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI. CWE-89
SQL Injection 		CVE-2007-6392 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294223 - ace_image_hosting_script ace_image_hosting_script SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode. CWE-89
SQL Injection 		CVE-2007-6393 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294224 - p3mbo content_injector SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter in an expand action. CWE-89
SQL Injection 		CVE-2007-6394 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294225 - p3mbo content_injector Patch Information - http://www.p3mbo.com/index.php?pg=10004 CWE-89
SQL Injection 		CVE-2007-6394 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294226 - poldoc poldoc_document_management_system Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read arbitrary files via a .. (dot dot) or absolute pathname in the filename parameter. CWE-22
Path Traversal 		CVE-2007-6400 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294227 - adultscript adultscript admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication and obtain administrative credent… CWE-255
Credentials Management 		CVE-2007-6414 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294228 - xen xen The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6416 2017-09-29 10:29 2007-12-18 Show GitHub Exploit DB Packet Storm
294229 - hp hp-ux Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. NVD-CWE-noinfo
CVE-2007-6419 2017-09-29 10:29 2007-12-25 Show GitHub Exploit DB Packet Storm
294230 - my123tkshop e-commerce-suite SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded value of the admin parameter to shop/admin.php. CWE-89
SQL Injection 		CVE-2007-6458 2017-09-29 10:29 2007-12-20 Show GitHub Exploit DB Packet Storm