Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240371 5.1 警告 mobilesecure inc - Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5408 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240372 7.5 危険 osTicket - osTicket の open_form.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5407 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240373 3.6 注意 passgo - Passgo Defender における重要なファイルを変更される脆弱性 - CVE-2006-5406 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240374 7.5 危険 マイクロソフト - Microsoft Class Package Export Tool におけるバッファオーバーフローの脆弱性 - CVE-2006-5395 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240375 7.5 危険 opendoc - OpenDock FullCore における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5392 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240376 7.5 危険 nuralstorm - NuralStorm Webmail の process.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5386 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240377 9 危険 オラクル - JD Edwards EnterpriseOne の JD Edwards HTML Server における脆弱性 - CVE-2006-5378 2012-09-25 15:36 2006-10-17 Show GitHub Exploit DB Packet Storm
240378 9 危険 オラクル - Oracle PeopleSoft Enterprise の PeopleSoft コンポーネントにおける脆弱性 - CVE-2006-5377 2012-09-25 15:36 2006-10-17 Show GitHub Exploit DB Packet Storm
240379 9 危険 オラクル - Oracle PeopleSoft Enterprise の PeopleTools コンポーネントにおける脆弱性 - CVE-2006-5376 2012-09-25 15:36 2006-10-17 Show GitHub Exploit DB Packet Storm
240380 10 危険 オラクル - Oracle PeopleSoft Enterprise の PeopleTools コンポーネントにおける脆弱性 - CVE-2006-5375 2012-09-25 15:36 2006-10-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267621 7.2 HIGH
Network 		schneider-electric struxureware_building_operations_automation_server_as_firmware
struxureware_building_operations_automation_server_as-p_firmware 		Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeat… CWE-284
Improper Access Control 		CVE-2016-2278 2024-11-21 11:48 2016-03-2 Show GitHub Exploit DB Packet Storm
267622 6.8 MEDIUM
Network 		phpmyadmin phpmyadmin The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to… CWE-20
 Improper Input Validation  		CVE-2016-2562 2024-11-21 11:48 2016-03-1 Show GitHub Exploit DB Packet Storm
267623 5.4 MEDIUM
Network 		phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normal… CWE-79
Cross-site Scripting 		CVE-2016-2561 2024-11-21 11:48 2016-03-1 Show GitHub Exploit DB Packet Storm
267624 6.1 MEDIUM
Network 		phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML… CWE-79
Cross-site Scripting 		CVE-2016-2560 2024-11-21 11:48 2016-03-1 Show GitHub Exploit DB Packet Storm
267625 5.4 MEDIUM
Network 		phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to i… CWE-79
Cross-site Scripting 		CVE-2016-2559 2024-11-21 11:48 2016-03-1 Show GitHub Exploit DB Packet Storm
267626 5.9 MEDIUM
Network 		wireshark wireshark The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2532 2024-11-21 11:48 2016-02-28 Show GitHub Exploit DB Packet Storm
267627 5.9 MEDIUM
Network 		wireshark wireshark Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds rea… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2531 2024-11-21 11:48 2016-02-28 Show GitHub Exploit DB Packet Storm
267628 5.9 MEDIUM
Network 		wireshark wireshark The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, wh… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2530 2024-11-21 11:48 2016-02-28 Show GitHub Exploit DB Packet Storm
267629 5.5 MEDIUM
Local 		wireshark wireshark The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2529 2024-11-21 11:48 2016-02-28 Show GitHub Exploit DB Packet Storm
267630 5.9 MEDIUM
Network 		wireshark wireshark The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denia… CWE-20
 Improper Input Validation  		CVE-2016-2528 2024-11-21 11:48 2016-02-28 Show GitHub Exploit DB Packet Storm