Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202521 8.8 重要
Network
IBM - IBM Connections におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-3007 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202522 5.4 警告
Network
IBM - IBM Connections の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3006 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202523 5.4 警告
Network
IBM - IBM Connections の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3003 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202524 5.4 警告
Network
IBM - IBM Connections の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3001 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202525 4.3 警告
Network
IBM - IBM Connections のヘルプサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3000 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202526 6.5 警告
Network
IBM - IBM Connections における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2999 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202527 3.1
Network
IBM - IBM WebSphere MQ におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-0379 2016-09-28 16:23 2016-06-2 Show GitHub Exploit DB Packet Storm
202528 3.7
Network
IBM - IBM Security Guardium における重要なクエリ文字列情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0248 2016-09-28 16:23 2016-09-14 Show GitHub Exploit DB Packet Storm
202529 8.8 重要
Local
Moxa Inc. - Moxa Active OPC Server における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-5793 2016-09-28 15:14 2016-09-20 Show GitHub Exploit DB Packet Storm
202530 7.5 重要
Network
シスコシステムズ - Cisco FirePOWER Management Center および FireSIGHT システム ソフトウェアにおける do-not-decrypt 設定を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6411 2016-09-28 15:06 2016-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345771 - ibm tivoli_directory_server IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite. NVD-CWE-Other
CVE-2006-0717 2017-07-20 10:30 2006-02-15 Show GitHub Exploit DB Packet Storm
345772 - reamday_enterprises magic_news_lite PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in … CWE-94
Code Injection
CVE-2006-0723 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
345773 - reamday_enterprises magic_news_lite profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modi… NVD-CWE-Other
CVE-2006-0724 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
345774 - plume-cms plume_cms PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_pat… CWE-94
Code Injection
CVE-2006-0725 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
345775 - cpg-nuke dragonfly_cms Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a li… NVD-CWE-Other
CVE-2006-0726 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
345776 - webspell webspell SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op parameter. NVD-CWE-Other
CVE-2006-0728 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
345777 - timo_sirainen dovecot Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs"… NVD-CWE-noinfo
CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-0730 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
345778 - valve_software half-life_cstrike_dedicated_server The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon ha… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-0734 2017-07-20 10:30 2006-02-16 Show GitHub Exploit DB Packet Storm
345779 - apache log4net Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors. CWE-134
Use of Externally-Controlled Format String
CVE-2006-0743 2017-07-20 10:30 2006-03-10 Show GitHub Exploit DB Packet Storm
345780 - hivemail hivemail Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contactgroupid parameter in addressbook.update.php, (2) the messag… NVD-CWE-Other
CVE-2006-0757 2017-07-20 10:30 2006-02-18 Show GitHub Exploit DB Packet Storm