Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222521	5	警告	avant force	-	Avant Browser におけるコマンドライン引数を変更される脆弱性	-	CVE-2006-2058	2013-12-26 15:44	2006-04-26	Show	GitHub Exploit DB Packet Storm

222522	7.1	危険	WinSCP	-	WinSCP における任意のファイルをアップロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2006-3015	2013-12-26 15:44	2006-06-14	Show	GitHub Exploit DB Packet Storm

222523	5	警告	alan ward	-	A-CART におけるユーザ名およびパスワードの情報を取得される脆弱性	-	CVE-2006-2948	2013-12-26 15:44	2006-06-12	Show	GitHub Exploit DB Packet Storm

222524	6	警告	KDE project	-	aRts の artswrapper における root 権限を取得される脆弱性	-	CVE-2006-2916	2013-12-26 15:44	2006-06-15	Show	GitHub Exploit DB Packet Storm

222525	4.6	警告	ActiveState Software	-	Windows 用 ActiveState ActivePerl における権限を取得される脆弱性	-	CVE-2006-2856	2013-12-26 15:44	2006-06-6	Show	GitHub Exploit DB Packet Storm

222526	10	危険	aspwebsoft	-	ASPwebSoft Speedy Asp Discussion Forum における任意のアカウントのパスワードを変更される脆弱性	-	CVE-2006-2807	2013-12-26 15:44	2006-06-5	Show	GitHub Exploit DB Packet Storm

222527	7.2	危険	サン・マイクロシステムズ	-	Sun Storage Automated Diagnostic Environment のパッケージコンポーネントにおける権限を取得される脆弱性	-	CVE-2006-2790	2013-12-26 15:44	2006-06-2	Show	GitHub Exploit DB Packet Storm

222528	5	警告	マイクロソフト avant force Mozilla Foundation	-	Mozilla Firefox におけるコマンドライン引数を変更される脆弱性	-	CVE-2006-2057	2013-12-26 15:44	2006-04-26	Show	GitHub Exploit DB Packet Storm

222529	5	警告	マイクロソフト	-	Windows XP 用 Internet Explorer 6 におけるコマンドライン引数を変更される脆弱性	-	CVE-2006-2056	2013-12-26 15:44	2006-04-26	Show	GitHub Exploit DB Packet Storm

222530	5	警告	マイクロソフト	-	Microsoft Outlook 2003 におけるコマンドライン引数を変更される脆弱性	-	CVE-2006-2055	2013-12-26 15:44	2006-04-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267961	7.5	HIGH Network	redhat canonical	openstack openstack_ironic	The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge…	CWE-200 Information Exposure	CVE-2016-4985	2024-11-21 11:53	2016-07-13	Show	GitHub Exploit DB Packet Storm

267962	7.8	HIGH Local	linecorp	line line_installer	Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.	NVD-CWE-Other	CVE-2016-4831	2024-11-21 11:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

267963	7.5	HIGH Network	apache	http_server	The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allow…	CWE-284 Improper Access Control	CVE-2016-4979	2024-11-21 11:53	2016-07-6	Show	GitHub Exploit DB Packet Storm

267964	6.1	MEDIUM Network	phpmyadmin opensuse	phpmyadmin opensuse	Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mish…	CWE-79 Cross-site Scripting	CVE-2016-5099	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

267965	5.3	MEDIUM Network	phpmyadmin opensuse	phpmyadmin opensuse	Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.	CWE-22 Path Traversal	CVE-2016-5098	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

267966	5.3	MEDIUM Network	opensuse phpmyadmin	opensuse phpmyadmin	phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by readin…	CWE-200 Information Exposure	CVE-2016-5097	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

267967	7.5	HIGH Network	ntp oracle novell suse opensuse	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse	ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.	CWE-476 NULL Pointer Dereference	CVE-2016-4957	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

267968	5.3	MEDIUM Network	ntp oracle novell suse opensuse siemens	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware	ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists beca…	NVD-CWE-noinfo	CVE-2016-4956	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

267969	5.9	MEDIUM Network	ntp oracle novell suse opensuse siemens	ntp solaris suse_manager linux_enterprise_server openstack_cloud manager_proxy linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware	ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packe…	CWE-362 Race Condition	CVE-2016-4955	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

267970	7.5	HIGH Network	ntp oracle suse opensuse siemens	ntp solaris linux_enterprise_server openstack_cloud manager_proxy manager linux_enterprise_desktop leap opensuse simatic_net_cp_443-1_opc_ua_firmware tim_4r-ie_firmware<…	ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at…	CWE-287 Improper Authentication	CVE-2016-4953	2024-11-21 11:53	2016-07-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed