Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240421 7.5 危険 nivisec - phpBB 用の Nivisec User Viewed Posts Tracker モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5223 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240422 5.1 警告 Objective Development Software GmbH - WebYep における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5220 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240423 5.1 警告 Moodle - Moodle の blog モジュールの blog/index.php における SQL インジェクションの脆弱性 - CVE-2006-5219 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240424 4.6 警告 OpenBSD
NetBSD
- OpenBSD などの製品で使用される systrace_preprepl 関数における整数オーバーフローの脆弱性 - CVE-2006-5218 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240425 7.5 危険 Invision Power Services, Inc - Invision Gallery における SQL インジェクションの脆弱性 - CVE-2006-5206 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240426 5 警告 Invision Power Services, Inc - Invision Gallery におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5205 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240427 2.1 注意 Invision Power Services, Inc - IPB の action_admin/member.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5204 2012-09-25 15:36 2006-10-5 Show GitHub Exploit DB Packet Storm
240428 5.1 警告 Invision Power Services, Inc - IPB における SQL コマンドを実行される脆弱性 - CVE-2006-5203 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240429 5 警告 シスコシステムズ (Linksys) - Linksys WRT54g における任意の設定を変更される脆弱性 - CVE-2006-5202 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240430 5 警告 pdshoppro - PDshopPro におけるデータベースをダウンロードされる脆弱性 - CVE-2006-5197 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266901 8.1 HIGH
Network
ibm filenet_workplace IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an externa… CWE-611
XXE
CVE-2016-3055 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266902 6.8 MEDIUM
Network
ibm filenet_workplace Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecifi… CWE-601
Open Redirect
CVE-2016-3047 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266903 6.5 MEDIUM
Local
ibm powerkvm The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service (host OS infinite loop and hang) via unspecified vectors. CWE-20
CWE-284
 Improper Input Validation 
Improper Access Control
CVE-2016-3044 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266904 8.1 HIGH
Network
ibm appscan_source IBM AppScan Source 8.7 through 9.0.3.3 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity de… CWE-611
XXE
CVE-2016-3033 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266905 7.5 HIGH
Network
ibm network_path_manager
api_connect
IBM API Connect (aka APIConnect) before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended acces… CWE-200
Information Exposure
CVE-2016-3012 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266906 5.4 MEDIUM
Network
ibm urbancode_deploy Cross-site scripting (XSS) vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-2994 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266907 5.4 MEDIUM
Network
ibm lotus_protector_for_mail_security Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web scri… CWE-79
Cross-site Scripting
CVE-2016-2991 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266908 5.4 MEDIUM
Network
ibm connections Cross-site scripting (XSS) vulnerability in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-2955 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266909 7.8 HIGH
Local
ibm tivoli_monitoring Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gai… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-2946 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm
266910 8.8 HIGH
Network
ibm tririga_application_platform The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via u… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2917 2024-11-21 11:49 2016-12-1 Show GitHub Exploit DB Packet Storm