Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240361 2.6 注意 Mozilla Foundation - Bugzilla の editversions.cgi におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2006-5455 2012-09-25 15:36 2006-10-15 Show GitHub Exploit DB Packet Storm
240362 5 警告 Mozilla Foundation - Bugzilla における deadline フィールドを取得される脆弱性 - CVE-2006-5454 2012-09-25 15:36 2006-10-15 Show GitHub Exploit DB Packet Storm
240363 3.5 注意 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5453 2012-09-25 15:36 2006-10-15 Show GitHub Exploit DB Packet Storm
240364 7.5 危険 kinesis - KICS の index.asp における SQL インジェクションの脆弱性 - CVE-2006-5450 2012-09-25 15:36 2006-10-23 Show GitHub Exploit DB Packet Storm
240365 6.5 警告 Horde - Horde 用の Ingo モジュールの procmail における任意のコマンドを実行される脆弱性 - CVE-2006-5449 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240366 7.5 危険 マイクロソフト - Microsoft Windows DRM の drmstor.dll ActiveX オブジェクトにおける任意のコードを実行される脆弱性 - CVE-2006-5448 2012-09-25 15:36 2006-10-23 Show GitHub Exploit DB Packet Storm
240367 2.6 注意 marc giombetti - phpPowerCards の db/txt.inc.php における任意のファイルを上書きされる脆弱性 - CVE-2006-5432 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240368 5.1 警告 php amx - Php AMX の plugins/main.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5427 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240369 7.5 危険 local calendar system - LoCal Calendar System の lib/lcUser.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5426 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240370 7.5 危険 lou portail - Lou Portail の admin/admin_module.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5423 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268551 7.5 HIGH
Network
libreswan
fedoraproject
libreswan
fedora
Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform. CWE-310
CWE-20
Cryptographic Issues
 Improper Input Validation 
CVE-2016-3071 2024-11-21 11:49 2016-04-18 Show GitHub Exploit DB Packet Storm
268552 5.4 MEDIUM
Network
fourkitchens
fedoraproject
block_class
fedora
Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the "Administer block classes" permission to inject arbitra… CWE-79
Cross-site Scripting
CVE-2016-3144 2024-11-21 11:49 2016-04-16 Show GitHub Exploit DB Packet Storm
268553 6.1 MEDIUM
Network
redhat satellite
spacewalk-java
Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to systems… CWE-79
Cross-site Scripting
CVE-2016-3079 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
268554 3.8 LOW
Local
oracle
xen
fedoraproject
debian
vm_server
xen
fedora
debian_linux
The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensiti… CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2016-3159 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
268555 3.8 LOW
Local
xen
fedoraproject
oracle
xen
fedora
vm_server
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive … CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2016-3158 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
268556 8.8 HIGH
Network
mercurial
debian
suse
opensuse
fedoraproject
redhat
mercurial
debian_linux
linux_enterprise_software_development_kit
linux_enterprise_debuginfo
opensuse
leap
fedora
enterprise_linux_desktop
enterprise_linux_server_aus
enterp…
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository. CWE-20
 Improper Input Validation 
CVE-2016-3069 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
268557 8.8 HIGH
Network
debian
mercurial
fedoraproject
redhat
suse
opensuse
debian_linux
mercurial
fedora
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_li…
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository. CWE-20
 Improper Input Validation 
CVE-2016-3068 2024-11-21 11:49 2016-04-14 Show GitHub Exploit DB Packet Storm
268558 8.8 HIGH
Network
cacti cacti SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parent_id parameter in an item_edit action. CWE-89
SQL Injection
CVE-2016-3172 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm
268559 7.8 HIGH
Local
xen
canonical
xen
ubuntu_linux
The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-3157 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm
268560 8.1 HIGH
Network
drupal
debian
drupal
debian_linux
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data trunc… CWE-19
 Data Processing Errors
CVE-2016-3171 2024-11-21 11:49 2016-04-13 Show GitHub Exploit DB Packet Storm