Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240261 7.5 危険 otterware - inc/session.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5863 2012-09-25 15:36 2006-11-10 Show GitHub Exploit DB Packet Storm
240262 4.6 警告 network administration visualized - NAV 用の Web インターフェースのセッションメカニズムにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-5862 2012-09-25 15:36 2006-11-10 Show GitHub Exploit DB Packet Storm
240263 10 危険 IBM - IBM TSM におけるバッファオーバーフローの脆弱性 - CVE-2006-5855 2012-09-25 15:36 2006-12-6 Show GitHub Exploit DB Packet Storm
240264 7.5 危険 Novell - Novell Netware Client の nwspool.dll におけるバッファオーバーフローの脆弱性 - CVE-2006-5854 2012-09-25 15:36 2006-12-3 Show GitHub Exploit DB Packet Storm
240265 6.8 警告 immediacy - Immediacy .NET CMS の logon.aspx におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5853 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
240266 4.6 警告 Openbase International - OpenBase SQL の openexec における権限を取得される脆弱性 - CVE-2006-5852 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
240267 2.1 注意 Openbase International - OpenBase SQL の openexec における任意のファイルを作成される脆弱性 - CVE-2006-5851 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
240268 7.5 危険 irayoblog - IrayoBlog の inc/irayofuncs.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5849 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
240269 5.1 警告 newp - NewP News Publication System における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5838 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
240270 7.2 危険 opendarwin - Apple Mac OS X の XNU におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5836 2012-09-25 15:36 2006-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267551 8.1 HIGH
Network
huawei s12700_firmware
s5700_firmware
Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of se… CWE-20
 Improper Input Validation 
CVE-2016-4087 2024-11-21 11:51 2016-05-24 Show GitHub Exploit DB Packet Storm
267552 7.5 HIGH
Network
quagga
opensuse
quagga
leap
opensuse
The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and d… CWE-20
 Improper Input Validation 
CVE-2016-4049 2024-11-21 11:51 2016-05-24 Show GitHub Exploit DB Packet Storm
267553 6.0 MEDIUM
Local
fedoraproject
canonical
qemu
debian
fedora
ubuntu_linux
qemu
debian_linux
The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous tra… CWE-400
 Uncontrolled Resource Consumption
CVE-2016-4037 2024-11-21 11:51 2016-05-24 Show GitHub Exploit DB Packet Storm
267554 8.6 HIGH
Network
qemu
canonical
fedoraproject
debian
qemu
ubuntu_linux
fedora
debian_linux
Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cau… CWE-120
Classic Buffer Overflow
CVE-2016-4001 2024-11-21 11:51 2016-05-24 Show GitHub Exploit DB Packet Storm
267555 7.5 HIGH
Network
opensuse
golang
fedoraproject
leap
go
fedora
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a … CWE-20
 Improper Input Validation 
CVE-2016-3959 2024-11-21 11:51 2016-05-24 Show GitHub Exploit DB Packet Storm
267556 7.8 HIGH
Local
golang go Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-3958 2024-11-21 11:51 2016-05-24 Show GitHub Exploit DB Packet Storm
267557 9.8 CRITICAL
Network
php
opensuse
php
leap
opensuse
Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string,… CWE-190
 Integer Overflow or Wraparound
CVE-2016-4346 2024-11-21 11:51 2016-05-22 Show GitHub Exploit DB Packet Storm
267558 9.8 CRITICAL
Network
php php Integer overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other i… CWE-190
 Integer Overflow or Wraparound
CVE-2016-4345 2024-11-21 11:51 2016-05-22 Show GitHub Exploit DB Packet Storm
267559 9.8 CRITICAL
Network
php php Integer overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long argumen… CWE-190
 Integer Overflow or Wraparound
CVE-2016-4344 2024-11-21 11:51 2016-05-22 Show GitHub Exploit DB Packet Storm
267560 8.8 HIGH
Network
php
opensuse
php
opensuse
The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service… CWE-824
 Access of Uninitialized Pointer
CVE-2016-4343 2024-11-21 11:51 2016-05-22 Show GitHub Exploit DB Packet Storm