Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240511 5.1 警告 mybulletinboard - MyBB の archive/index.php/forum-4.html におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4972 2012-09-25 15:36 2006-09-24 Show GitHub Exploit DB Packet Storm
240512 5 警告 mybulletinboard - MyBB における重要な情報を取得される脆弱性 - CVE-2006-4971 2012-09-25 15:36 2006-09-24 Show GitHub Exploit DB Packet Storm
240513 6.8 警告 nextage - NextAge Cart におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4967 2012-09-25 15:36 2006-09-24 Show GitHub Exploit DB Packet Storm
240514 6.8 警告 neosys - Java 用の Neon WebMail におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4956 2012-09-25 15:36 2006-09-23 Show GitHub Exploit DB Packet Storm
240515 5 警告 neosys - Java 用の Neon WebMail におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4955 2012-09-25 15:36 2006-09-23 Show GitHub Exploit DB Packet Storm
240516 7.5 危険 neosys - Neon WebMail の updateuser サーブレットにおける任意のユーザの情報を変更される脆弱性 - CVE-2006-4954 2012-09-25 15:35 2006-09-23 Show GitHub Exploit DB Packet Storm
240517 7.5 危険 neosys - Neon WebMail における SQL インジェクションの脆弱性 - CVE-2006-4953 2012-09-25 15:35 2006-09-23 Show GitHub Exploit DB Packet Storm
240518 7.5 危険 neosys - Neon WebMail の updatemail サーブレットにおける電子メールメッセージを移動される脆弱性 - CVE-2006-4952 2012-09-25 15:35 2006-09-23 Show GitHub Exploit DB Packet Storm
240519 7.5 危険 neosys - Neon WebMail における任意の JSP コードを実行される脆弱性 - CVE-2006-4951 2012-09-25 15:35 2006-09-23 Show GitHub Exploit DB Packet Storm
240520 5 警告 Moodle - Moodle の course/jumpto.php における重要な情報を取得される脆弱性 - CVE-2006-4943 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266691 8.8 HIGH
Network 		google chrome WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of … CWE-416
 Use After Free 		CVE-2016-5171 2024-11-21 11:53 2016-09-26 Show GitHub Exploit DB Packet Storm
266692 8.8 HIGH
Network 		google chrome WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which al… CWE-416
 Use After Free 		CVE-2016-5170 2024-11-21 11:53 2016-09-26 Show GitHub Exploit DB Packet Storm
266693 8.8 HIGH
Network 		google chrome_os Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. NVD-CWE-noinfo
CVE-2016-5169 2024-11-21 11:53 2016-09-26 Show GitHub Exploit DB Packet Storm
266694 8.8 HIGH
Network 		iodata hvl-a2.0_firmware
hvl-a3.0_firmware
hvl-a4.0_firmware
hvl-at1.0s_firmware
hvl-at2.0_firmware
hvl-at2.0a_firmware
hvl-at3.0_firmware
hvl-at3.0a_firmware
hvl-at4.0_firmware
h… 		Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmw… CWE-352
 Origin Validation Error 		CVE-2016-4845 2024-11-21 11:53 2016-09-24 Show GitHub Exploit DB Packet Storm
266695 7.4 HIGH
Network 		mozilla firefox Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spo… CWE-20
 Improper Input Validation  		CVE-2016-5284 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
266696 8.8 HIGH
Network 		mozilla firefox Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions … CWE-284
Improper Access Control 		CVE-2016-5283 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
266697 6.5 MEDIUM
Network 		mozilla firefox Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a… CWE-200
Information Exposure 		CVE-2016-5282 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
266698 9.8 CRITICAL
Network 		mozilla firefox Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by levera… CWE-416
 Use After Free 		CVE-2016-5281 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
266699 9.8 CRITICAL
Network 		mozilla firefox Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows rem… CWE-416
 Use After Free 		CVE-2016-5280 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm
266700 4.3 MEDIUM
Network 		mozilla firefox Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code. CWE-200
Information Exposure 		CVE-2016-5279 2024-11-21 11:53 2016-09-23 Show GitHub Exploit DB Packet Storm