Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201781 8.8 重要
Network
The PHP Group
Debian
FreeBSD
LibGD project
Fedora Project
レッドハット
- PHP で使用される GD Graphics Library の gd_gd2.c の _gd2GetHeader 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5766 2016-10-28 09:58 2016-06-23 Show GitHub Exploit DB Packet Storm
201782 7.5 重要
Network
The PHP Group
openSUSE project
- PHP の GD におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-8874 2016-10-28 09:58 2015-08-6 Show GitHub Exploit DB Packet Storm
201783 8.8 重要
Network
Google - Google Chrome のプロキシ自動設定機能の net/proxy/proxy_service.cc における認証情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-5134 2016-10-28 09:50 2016-07-20 Show GitHub Exploit DB Packet Storm
201784 7.5 重要
Network
アップル - 複数の Apple 製品の CFNetwork Proxies サブシステムにおける重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-1801 2016-10-28 09:49 2016-05-16 Show GitHub Exploit DB Packet Storm
201785 4.6 警告
Physics
Linux
SUSE
Canonical
- Linux Kernel の drivers/usb/misc/iowarrior.c の iowarrior_probe 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2188 2016-10-27 18:07 2016-04-12 Show GitHub Exploit DB Packet Storm
201786 4.6 警告
Physics
Linux
SUSE
Canonical
- Linux Kernel の drivers/input/misc/powermate.c の powermate_probe 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2186 2016-10-27 18:07 2016-04-12 Show GitHub Exploit DB Packet Storm
201787 4.6 警告
Physics
Linux
SUSE
Canonical
- Linux Kernel の snd-usb-audio ドライバの sound/usb/quirks.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2184 2016-10-27 18:07 2016-04-12 Show GitHub Exploit DB Packet Storm
201788 4.6 警告
Physics
Linux
SUSE
Canonical
- Linux Kernel の drivers/input/misc/ati_remote2.c の ati_remote2_probe 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2185 2016-10-27 18:07 2016-04-12 Show GitHub Exploit DB Packet Storm
201789 6.8 警告 Debian
Google
- Google Chrome の PDFium で使用される OpenJPEG の pi.c における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1628 2016-10-27 18:07 2016-02-9 Show GitHub Exploit DB Packet Storm
201790 8.1 重要
Network
アップル
ソフォス
ヒューレット・パッカード・エンタープライズ
オラクル
OpenBSD
- OpenSSH のクライアントの roaming_common.c の roaming_read および roaming_write 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-0778 2016-10-27 18:07 2016-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345661 - topcmm_computing 123_flash_chat_server Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." (dot dot) sequences in the usern… CWE-22
Path Traversal
CVE-2006-0223 2017-07-20 10:29 2006-01-17 Show GitHub Exploit DB Packet Storm
345662 - freebsd freebsd Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcas… NVD-CWE-Other
CVE-2006-0226 2017-07-20 10:29 2006-01-19 Show GitHub Exploit DB Packet Storm
345663 - grsecurity grsecurity_kernel_patch The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be rest… NVD-CWE-Other
CVE-2006-0228 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm
345664 - gtp icommerce Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) subcat parameters. NOTE: the provenance … NVD-CWE-Other
CVE-2006-0237 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm
345665 - gamerz wp-stats SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter. NVD-CWE-Other
CVE-2006-0238 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm
345666 - 8pixel.net simple_blog Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other par… CWE-89
SQL Injection
CVE-2006-0240 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm
345667 - smbcms smbcms Cross-site scripting (XSS) vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the text parameter, which is used by the "Search Site" field. NOTE: the prov… NVD-CWE-Other
CVE-2006-0243 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm
345668 - devellion cubecart Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) c… NVD-CWE-Other
CVE-2006-0245 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm
345669 - widexl download_tracker Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter. NVD-CWE-Other
CVE-2006-0246 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm
345670 - netbula anyboard Cross-site scripting (XSS) vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command. NVD-CWE-Other
CVE-2006-0247 2017-07-20 10:29 2006-01-18 Show GitHub Exploit DB Packet Storm