Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240241 7.5 危険 mamboxchange - Mambo LaiThai の includes/mambo.php における SQL インジェクションの脆弱性 - CVE-2006-7092 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240242 7.5 危険 hinton design - phpht Topsites FREE における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7091 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240243 4.3 警告 hot links - Hot Links の dlback.php スクリプトにおける重要な情報を取得される脆弱性 - CVE-2006-7086 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240244 4.3 警告 opentools - Opentools Attachment Mod におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7073 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240245 7.5 危険 Invision Power Services, Inc - IPB の classes/class_session.php における SQL インジェクションの脆弱性 - CVE-2006-7071 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240246 6 警告 オラクル - Oracle における内部エラーを誘発される脆弱性 - CVE-2006-7067 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240247 5 警告 マイクロソフト
キヤノン		 - Microsoft Internet Explorer 6 および 7 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-7065 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240248 9.3 危険 Invision Power Services, Inc - IPB の forum/admin.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7064 2012-09-25 15:36 2007-02-23 Show GitHub Exploit DB Packet Storm
240249 7.8 危険 KDE project - kmail の calendar.php におけるサーバのフルパスを取得される脆弱性 - CVE-2006-7062 2012-09-25 15:36 2007-02-23 Show GitHub Exploit DB Packet Storm
240250 10 危険 keith reichley - DotWidget For Articles における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7052 2012-09-25 15:36 2007-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266851 6.1 MEDIUM
Network 		ibm maximo_for_transportation
maximo_for_utilities
maximo_for_aviation
maximo_for_nuclear_power
maximo_for_energy_optimization
maximo_asset_management
maximo_for_life_sciences
maximo… 		IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall… CWE-79
Cross-site Scripting 		CVE-2016-5902 2024-11-21 11:55 2017-02-9 Show GitHub Exploit DB Packet Storm
266852 5.9 MEDIUM
Network 		ibm tealeaf_customer_experience_on_cloud_network_capture_add-on IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the TLS certificate. An attac… CWE-200
Information Exposure 		CVE-2016-5900 2024-11-21 11:55 2017-02-9 Show GitHub Exploit DB Packet Storm
266853 5.4 MEDIUM
Network 		ibm rational_collaborative_lifecycle_management IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functiona… CWE-79
Cross-site Scripting 		CVE-2016-6032 2024-11-21 11:55 2017-02-9 Show GitHub Exploit DB Packet Storm
266854 7.2 HIGH
Network 		ibm security_key_lifecycle_manager IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-6104 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266855 4.0 MEDIUM
Local 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system. CWE-200
Information Exposure 		CVE-2016-6097 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266856 6.1 MEDIUM
Network 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended… CWE-79
Cross-site Scripting 		CVE-2016-6096 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266857 4.3 MEDIUM
Network 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data. CWE-200
Information Exposure 		CVE-2016-6094 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266858 6.2 MEDIUM
Local 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user. CWE-200
Information Exposure 		CVE-2016-6092 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266859 9.8 CRITICAL
Network 		gradle gradle ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object. CWE-502
 Deserialization of Untrusted Data 		CVE-2016-6199 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
266860 9.8 CRITICAL
Network 		php-gettext_project php-gettext Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header. CWE-94
Code Injection 		CVE-2016-6175 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm