Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208721 4.3 警告 オラクル - Oracle E-Business Suite の Oracle iProcurement における Redirection に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0521 2016-01-25 09:43 2016-01-19 Show GitHub Exploit DB Packet Storm
208722 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Java APIs に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0520 2016-01-25 09:43 2016-01-19 Show GitHub Exploit DB Packet Storm
208723 4.3 警告 オラクル - Oracle E-Business Suite の Oracle iReceivables における AR Web Utilities に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0519 2016-01-25 09:43 2016-01-19 Show GitHub Exploit DB Packet Storm
208724 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Human Resources における General utilities に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0518 2016-01-25 09:43 2016-01-19 Show GitHub Exploit DB Packet Storm
208725 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Human Resources における General utilities に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0517 2016-01-25 09:43 2016-01-19 Show GitHub Exploit DB Packet Storm
208726 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Quality における QA / Order Management Integration に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0516 2016-01-25 09:43 2016-01-19 Show GitHub Exploit DB Packet Storm
208727 6.4 警告 オラクル - Oracle E-Business Suite の Oracle CRM Technical Foundation における BIS Common Components に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0515 2016-01-25 09:39 2016-01-19 Show GitHub Exploit DB Packet Storm
208728 6.4 警告 オラクル - Oracle E-Business Suite の Oracle CRM Technical Foundation における BIS Common Components に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0514 2016-01-25 09:39 2016-01-19 Show GitHub Exploit DB Packet Storm
208729 4.3 警告 オラクル - Oracle E-Business Suite の Oracle CRM Technical Foundation における BIS Common Components に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0513 2016-01-25 09:39 2016-01-19 Show GitHub Exploit DB Packet Storm
208730 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Human Resources における Self Service - Common Modules に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0512 2016-01-25 09:39 2016-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354761 - kphone kphone kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords. NVD-CWE-Other
CVE-2006-2442 2011-03-8 11:36 2006-05-18 Show GitHub Exploit DB Packet Storm
354762 - s9y serendipity Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag. NVD-CWE-Other
CVE-2006-2495 2011-03-8 11:36 2006-05-20 Show GitHub Exploit DB Packet Storm
354763 - fckeditor fckeditor editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type parameter, which allows remote attackers to upload arbitrary file t… NVD-CWE-Other
CVE-2006-2529 2011-03-8 11:36 2006-05-23 Show GitHub Exploit DB Packet Storm
354764 - xtreme_scripts xtreme_topsites Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchthis parameter in lostid.php … NVD-CWE-Other
CVE-2006-2544 2011-03-8 11:36 2006-05-23 Show GitHub Exploit DB Packet Storm
354765 - florian_amrhein newsportal Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal (TRanx rebuilded), allows remote attackers to inject arbitrary web script or HTML via un… NVD-CWE-Other
CVE-2006-2556 2011-03-8 11:36 2006-05-24 Show GitHub Exploit DB Packet Storm
354766 - e107 e107 SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. NVD-CWE-Other
CVE-2006-2590 2011-03-8 11:36 2006-05-25 Show GitHub Exploit DB Packet Storm
354767 - e107 e107 Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exploit". NVD-CWE-Other
CVE-2006-2591 2011-03-8 11:36 2006-05-25 Show GitHub Exploit DB Packet Storm
354768 - artmedic_webdesign artmedic_newsletter artmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the email parameter to ne… NVD-CWE-Other
CVE-2006-2609 2011-03-8 11:36 2006-05-26 Show GitHub Exploit DB Packet Storm
354769 - ibm aix Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands. NVD-CWE-Other
CVE-2006-2647 2011-03-8 11:36 2006-05-30 Show GitHub Exploit DB Packet Storm
354770 - mono
suse 		xsp
suse_open_enterprise_server
suse_linux 		Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arb… NVD-CWE-Other
CVE-2006-2658 2011-03-8 11:36 2006-09-13 Show GitHub Exploit DB Packet Storm