Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199741 8.8 重要
Network
IBM - IBM Kenexa LMS on Cloud における任意のファイルをアップロードされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-8931 2017-02-15 16:08 2016-10-25 Show GitHub Exploit DB Packet Storm
199742 7.6 重要
Network
IBM - IBM Kenexa LMS on Cloud における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8930 2017-02-15 16:08 2016-10-25 Show GitHub Exploit DB Packet Storm
199743 5.4 警告
Network
IBM - IBM Kenexa LMS on Cloud における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8929 2017-02-15 16:08 2016-10-25 Show GitHub Exploit DB Packet Storm
199744 7.6 重要
Network
IBM - IBM Kenexa LMS on Cloud における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8928 2017-02-15 16:08 2016-10-25 Show GitHub Exploit DB Packet Storm
199745 6.5 警告
Network
IBM - IBM Kenexa LMS on Cloud におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-8913 2017-02-15 16:07 2016-11-11 Show GitHub Exploit DB Packet Storm
199746 4.3 警告
Network
IBM - IBM Kenexa LMS on Cloud における重要な情報を読まれる脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2016-8912 2017-02-15 16:07 2016-11-11 Show GitHub Exploit DB Packet Storm
199747 5.4 警告
Network
IBM - IBM Kenexa LMS on Cloud におけるクリック操作をハイジャックされる脆弱性 CWE-254
セキュリティ機能
CVE-2016-8911 2017-02-15 16:07 2016-11-11 Show GitHub Exploit DB Packet Storm
199748 6.5 警告
Network
IBM - IBM Kenexa LMS on Cloud におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-6126 2017-02-15 16:07 2016-11-11 Show GitHub Exploit DB Packet Storm
199749 8.8 重要
Network
IBM - IBM Kenexa LMS on Cloud における任意のファイルをアップロードされる脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2016-6124 2017-02-15 16:07 2016-11-11 Show GitHub Exploit DB Packet Storm
199750 9.8 緊急
Network
IBM - IBM WebSphere Commerce におけるユーザのパーソナルデータを公開される脆弱性 CWE-noinfo
情報不足
CVE-2016-6090 2017-02-15 16:07 2016-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345661 - squirrelmail squirrelmail SquirrelMail 1.4.6 and earlier, with register_globals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors. NOTE: while "cookie theft" is frequently associated … NVD-CWE-Other
CVE-2006-3665 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
345662 - myiosoft.com ajaxportal SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-200… NVD-CWE-Other
CVE-2006-3666 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
345663 - dynamic_universal_music_bibliotheque dumb Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted at… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-3668 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
345664 - kde konqueror KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demo… NVD-CWE-Other
CVE-2006-3672 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
345665 - armagetron armagetron_advanced nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (application crash) via a large owner value, which causes an assert error. NVD-CWE-Other
CVE-2006-3673 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
345666 - armagetron armagetron_advanced nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a large number handled by the id_req_handler function. NVD-CWE-Other
CVE-2006-3674 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
345667 - awstats awstats Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, … NVD-CWE-Other
CVE-2006-3681 2017-07-20 10:32 2006-07-21 Show GitHub Exploit DB Packet Storm
345668 - awstats awstats awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters. NVD-CWE-Other
CVE-2006-3682 2017-07-20 10:32 2006-07-21 Show GitHub Exploit DB Packet Storm
345669 - edgewall_software trac Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers … NVD-CWE-Other
CVE-2006-3695 2017-07-20 10:32 2006-07-21 Show GitHub Exploit DB Packet Storm
345670 - edgewall_software trac Upgrade to 0.9.6 NVD-CWE-Other
CVE-2006-3695 2017-07-20 10:32 2006-07-21 Show GitHub Exploit DB Packet Storm