Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240501	6.8	警告	Mambo Foundation	-	Mambo の a6mambocredits コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-4288	2012-09-25 15:35	2006-08-22	Show	GitHub Exploit DB Packet Storm

240502	7.5	危険	nes game	-	NES Game などの製品における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4287	2012-09-25 15:35	2006-08-22	Show	GitHub Exploit DB Packet Storm

240503	7.5	危険	lblog	-	LBlog の comments.asp における SQL インジェクションの脆弱性	-	CVE-2006-4284	2012-09-25 15:35	2006-08-22	Show	GitHub Exploit DB Packet Storm

240504	7.5	危険	mamboxchange	-	Mambo 用の mambowiki コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4282	2012-09-25 15:35	2006-08-22	Show	GitHub Exploit DB Packet Storm

240505	7.5	危険	Mambo Foundation	-	Mambo の catalogshop コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4275	2012-09-25 15:35	2006-08-21	Show	GitHub Exploit DB Packet Storm

240506	6.8	警告	vBulletin Solutions, Inc.	-	Jelsoft vBulletin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4273	2012-09-25 15:35	2006-08-3	Show	GitHub Exploit DB Packet Storm

240507	6.8	警告	Mambo Foundation	-	Mambo 用の mambelfish コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-4270	2012-09-25 15:35	2006-08-21	Show	GitHub Exploit DB Packet Storm

240508	5	警告	カスペルスキー	-	Kaspersky Anti-Hacker における ICMP へのレスポンスを取得される脆弱性	-	CVE-2006-4265	2012-09-25 15:35	2006-08-21	Show	GitHub Exploit DB Packet Storm

240509	5	警告	jake olefsky	-	Fotopholder の index.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4260	2012-09-25 15:35	2006-08-21	Show	GitHub Exploit DB Packet Storm

240510	6.8	警告	マイクロソフト	-	Microsoft DirectX SDK におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-4183	2012-09-25 15:35	2007-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266941	5.4	MEDIUM Network	ibm	rational_team_concert rational_rhapsody_design_manager rational_engineering_lifecycle_manager rational_quality_manager rational_collaborative_lifecycle_management rational_software_arc…	Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 …	CWE-79 Cross-site Scripting	CVE-2016-2926	2024-11-21 11:49	2016-11-26	Show	GitHub Exploit DB Packet Storm

266942	9.1	CRITICAL Network	ibm	security_access_manager security_access_manager_for_web	IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leve…	CWE-78 OS Command	CVE-2016-3028	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266943	8.1	HIGH Network	ibm	security_access_manager security_access_manager_for_mobile	IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attac…	CWE-254 7PK - Security Features	CVE-2016-3025	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266944	8.5	HIGH Network	ibm	tivoli_storage_manager_for_virtual_environments	IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2988	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266945	5.4	MEDIUM Network	ibm	rational_engineering_lifecycle_manager rational_team_concert rational_quality_manager rational_doors_next_generation rational_rhapsody_design_manager	Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x before 6.0.1 iFix6, Rational Quality Manager 6.x before 6.0.1 iFix6, Rational Team Concert 6.x before 6…	CWE-79 Cross-site Scripting	CVE-2016-2986	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266946	7.0	HIGH Local	ibm	spectrum_scale general_parallel_file_system	IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via craf…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2985	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266947	7.0	HIGH Local	ibm	spectrum_scale general_parallel_file_system	IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via craf…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2984	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266948	2.7	LOW Network	ibm	rational_team_concert rational_rhapsody_design_manager rational_software_architect_design_manager rational_doors_next_generation rational_collaborative_lifecycle_management rational_en…	IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18…	CWE-200 Information Exposure	CVE-2016-2947	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266949	6.5	MEDIUM Network	ibm	security_privileged_identity_manager	IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2016-2996	2024-11-21 11:49	2016-11-25	Show	GitHub Exploit DB Packet Storm

266950	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_server_2016 windows_8.1 windows_server_2008 windows_vista	The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Go…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3343	2024-11-21 11:49	2016-11-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed