Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240421 7.5 危険 nivisec - phpBB 用の Nivisec User Viewed Posts Tracker モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5223 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240422 5.1 警告 Objective Development Software GmbH - WebYep における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5220 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240423 5.1 警告 Moodle - Moodle の blog モジュールの blog/index.php における SQL インジェクションの脆弱性 - CVE-2006-5219 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240424 4.6 警告 OpenBSD
NetBSD		 - OpenBSD などの製品で使用される systrace_preprepl 関数における整数オーバーフローの脆弱性 - CVE-2006-5218 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240425 7.5 危険 Invision Power Services, Inc - Invision Gallery における SQL インジェクションの脆弱性 - CVE-2006-5206 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240426 5 警告 Invision Power Services, Inc - Invision Gallery におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5205 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240427 2.1 注意 Invision Power Services, Inc - IPB の action_admin/member.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5204 2012-09-25 15:36 2006-10-5 Show GitHub Exploit DB Packet Storm
240428 5.1 警告 Invision Power Services, Inc - IPB における SQL コマンドを実行される脆弱性 - CVE-2006-5203 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240429 5 警告 シスコシステムズ (Linksys) - Linksys WRT54g における任意の設定を変更される脆弱性 - CVE-2006-5202 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240430 5 警告 pdshoppro - PDshopPro におけるデータベースをダウンロードされる脆弱性 - CVE-2006-5197 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268671 6.5 MEDIUM
Network 		jasper_project jasper The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1867 2024-11-21 11:47 2016-01-21 Show GitHub Exploit DB Packet Storm
268672 5.3 MEDIUM
Network 		openbsd openssh The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1907 2024-11-21 11:47 2016-01-19 Show GitHub Exploit DB Packet Storm
268673 7.3 HIGH
Network 		php php Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) ph… CWE-189
Numeric Errors 		CVE-2016-1904 2024-11-21 11:47 2016-01-19 Show GitHub Exploit DB Packet Storm
268674 9.1 CRITICAL
Network 		php php The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or ca… CWE-119
CWE-200
Incorrect Access of Indexable Resource ('Range Error') 
Information Exposure 		CVE-2016-1903 2024-11-21 11:47 2016-01-19 Show GitHub Exploit DB Packet Storm
268675 5.4 MEDIUM
Network 		redhen_project redhen Multiple cross-site scripting (XSS) vulnerabilities in the Redhen module 7.x-1.x before 7.x-1.11 for Drupal allow remote authenticated users with certain access to inject arbitrary web script or HTML… CWE-79
Cross-site Scripting 		CVE-2016-1913 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268676 5.4 MEDIUM
Network 		dolibarr dolibarr Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastname, (2) firstname, (3) email, (… CWE-79
Cross-site Scripting 		CVE-2016-1912 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268677 6.1 MEDIUM
Network 		sap netweaver Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) Runtime Workbench (RWB) or (2) Pm… CWE-79
Cross-site Scripting 		CVE-2016-1911 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268678 5.3 MEDIUM
Network 		sap netweaver The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290. CWE-200
Information Exposure 		CVE-2016-1910 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268679 9.8 CRITICAL
Network 		fortinet fortios Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1909 2024-11-21 11:47 2016-01-16 Show GitHub Exploit DB Packet Storm
268680 5.5 MEDIUM
Local 		ffmpeg
canonical
opensuse 		ffmpeg
ubuntu_linux
leap 		FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP reques… CWE-200
Information Exposure 		CVE-2016-1898 2024-11-21 11:47 2016-01-15 Show GitHub Exploit DB Packet Storm