Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240391	6.8	警告	mybulletinboard	-	MyBB の inc/functions_post.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4706	2012-09-25 15:35	2006-09-12	Show	GitHub Exploit DB Packet Storm

240392	6.8	警告	マイクロソフト	-	Microsoft Visual Studio 2005 におけるクロスゾーンスクリプティングの脆弱性	CWE-Other その他	CVE-2006-4704	2012-09-25 15:35	2006-11-1	Show	GitHub Exploit DB Packet Storm

240393	5	警告	IBM	-	IBM Director における HTTP ヘッダから重要な情報を取得される脆弱性	-	CVE-2006-4683	2012-09-25 15:35	2006-09-11	Show	GitHub Exploit DB Packet Storm

240394	5	警告	IBM	-	IBM Director におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-4682	2012-09-25 15:35	2006-09-11	Show	GitHub Exploit DB Packet Storm

240395	5	警告	IBM	-	IBM Director の Redirect.bat におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4681	2012-09-25 15:35	2006-09-11	Show	GitHub Exploit DB Packet Storm

240396	2.6	注意	PHP-Fusion	-	PHP-Fusion の maincore.php における SQL インジェクション攻撃を実行される脆弱性	-	CVE-2006-4673	2012-09-25 15:35	2006-09-11	Show	GitHub Exploit DB Packet Storm

240397	4.3	警告	mkportal	-	MKPortal の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4665	2012-09-25 15:35	2006-09-8	Show	GitHub Exploit DB Packet Storm

240398	4.3	警告	luke hutteman	-	Luke Hutteman SharpReader におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4761	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

240399	5	警告	laurentiu matei	-	Laurentiu Matei XHP CMS におけるインストールパスを取得される脆弱性	-	CVE-2006-4752	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

240400	6.8	警告	laurentiu matei	-	Laurentiu Matei XHP CMS の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4751	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267871	7.5	HIGH Network	jboss	enterprise_application_platform	The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability.	CWE-399 Resource Management Errors	CVE-2016-2094	2024-11-21 11:47	2016-05-7	Show	GitHub Exploit DB Packet Storm

267872	7.8	HIGH Local	linux google	linux_kernel nexus_5x_firmware nexus_6p_firmware	The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributio…	CWE-190 Integer Overflow or Wraparound	CVE-2016-2062	2024-11-21 11:47	2016-05-6	Show	GitHub Exploit DB Packet Storm

267873	7.0	HIGH Local	linux google	linux_kernel android	The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contri…	CWE-269 Improper Privilege Management	CVE-2016-2059	2024-11-21 11:47	2016-05-6	Show	GitHub Exploit DB Packet Storm

267874	6.5	MEDIUM Network	apache	subversion	The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service …	NVD-CWE-Other	CVE-2016-2168	2024-11-21 11:47	2016-05-6	Show	GitHub Exploit DB Packet Storm

267875	6.8	MEDIUM Network	apache	subversion	The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate …	CWE-284 Improper Access Control	CVE-2016-2167	2024-11-21 11:47	2016-05-6	Show	GitHub Exploit DB Packet Storm

267876	8.2	HIGH Network	openssl	openssl	The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2176	2024-11-21 11:47	2016-05-5	Show	GitHub Exploit DB Packet Storm

267877	7.5	HIGH Network	openssl redhat	openssl enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus enterprise…	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory …	CWE-399 Resource Management Errors	CVE-2016-2109	2024-11-21 11:47	2016-05-5	Show	GitHub Exploit DB Packet Storm

267878	7.5	HIGH Network	openssl redhat	openssl enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus enterprise…	Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruptio…	CWE-189 Numeric Errors	CVE-2016-2106	2024-11-21 11:47	2016-05-5	Show	GitHub Exploit DB Packet Storm

267879	9.8	CRITICAL Network	redhat openssl google	enterprise_linux_hpc_node enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation openssl enterprise_linux_server_aus enterprise_linux_server_eus enterprise…	The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2108	2024-11-21 11:47	2016-05-5	Show	GitHub Exploit DB Packet Storm

267880	5.9	MEDIUM Network	redhat opensuse openssl google hp nodejs debian canonical	enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus enterprise_linux_hpc_…	The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleart…	CWE-310 CWE-200 Cryptographic Issues Information Exposure	CVE-2016-2107	2024-11-21 11:47	2016-05-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed