Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240391 6.8 警告 mybulletinboard - MyBB の inc/functions_post.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4706 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240392 6.8 警告 マイクロソフト - Microsoft Visual Studio 2005 におけるクロスゾーンスクリプティングの脆弱性 CWE-Other
その他
CVE-2006-4704 2012-09-25 15:35 2006-11-1 Show GitHub Exploit DB Packet Storm
240393 5 警告 IBM - IBM Director における HTTP ヘッダから重要な情報を取得される脆弱性 - CVE-2006-4683 2012-09-25 15:35 2006-09-11 Show GitHub Exploit DB Packet Storm
240394 5 警告 IBM - IBM Director におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4682 2012-09-25 15:35 2006-09-11 Show GitHub Exploit DB Packet Storm
240395 5 警告 IBM - IBM Director の Redirect.bat におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4681 2012-09-25 15:35 2006-09-11 Show GitHub Exploit DB Packet Storm
240396 2.6 注意 PHP-Fusion - PHP-Fusion の maincore.php における SQL インジェクション攻撃を実行される脆弱性 - CVE-2006-4673 2012-09-25 15:35 2006-09-11 Show GitHub Exploit DB Packet Storm
240397 4.3 警告 mkportal - MKPortal の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4665 2012-09-25 15:35 2006-09-8 Show GitHub Exploit DB Packet Storm
240398 4.3 警告 luke hutteman - Luke Hutteman SharpReader におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4761 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240399 5 警告 laurentiu matei - Laurentiu Matei XHP CMS におけるインストールパスを取得される脆弱性 - CVE-2006-4752 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240400 6.8 警告 laurentiu matei - Laurentiu Matei XHP CMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4751 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267261 7.8 HIGH
Local
opensuse
debian
lhasa_project
leap
opensuse
debian_linux
lhasa
Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive. CWE-190
 Integer Overflow or Wraparound
CVE-2016-2347 2024-11-21 11:48 2017-04-22 Show GitHub Exploit DB Packet Storm
267262 3.3 LOW
Local
samsung galaxy_s6_firmware
galaxy_note_3_firmware
secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exc… CWE-20
 Improper Input Validation 
CVE-2016-2567 2024-11-21 11:48 2017-04-14 Show GitHub Exploit DB Packet Storm
267263 9.8 CRITICAL
Network
samsung galaxy_s6_firmware Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081. CWE-89
SQL Injection
CVE-2016-2566 2024-11-21 11:48 2017-04-14 Show GitHub Exploit DB Packet Storm
267264 3.3 LOW
Local
samsung galaxy_s6_firmware Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail messages, aka SVE-2015-5081. CWE-200
Information Exposure
CVE-2016-2565 2024-11-21 11:48 2017-04-14 Show GitHub Exploit DB Packet Storm
267265 9.8 CRITICAL
Network
atutor atutor SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php. CWE-89
SQL Injection
CVE-2016-2555 2024-11-21 11:48 2017-04-13 Show GitHub Exploit DB Packet Storm
267266 6.1 MEDIUM
Network
mozilla bugzilla Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML. CWE-79
Cross-site Scripting
CVE-2016-2803 2024-11-21 11:48 2017-04-13 Show GitHub Exploit DB Packet Storm
267267 7.5 HIGH
Network
huawei s5700_firmware
s6700_firmware
s7700_firmware
s9700_firmware
s12700_firmware
acu2_firmware
Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2404 2024-11-21 11:48 2017-04-3 Show GitHub Exploit DB Packet Storm
267268 8.8 HIGH
Adjacent
pidgin mxit The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain log… CWE-326
Inadequate Encryption Strength
CVE-2016-2379 2024-11-21 11:48 2017-03-30 Show GitHub Exploit DB Packet Storm
267269 7.5 HIGH
Network
uclibc-ng_project uclibc-ng The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet. CWE-400
 Uncontrolled Resource Consumption
CVE-2016-2225 2024-11-21 11:48 2017-03-25 Show GitHub Exploit DB Packet Storm
267270 7.5 HIGH
Network
uclibc-ng_project uclibc-ng The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply. CWE-400
 Uncontrolled Resource Consumption
CVE-2016-2224 2024-11-21 11:48 2017-03-25 Show GitHub Exploit DB Packet Storm