Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240531	6.8	警告	miniBB	-	miniBB の bb_func_txt.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5673	2012-09-25 15:36	2006-11-2	Show	GitHub Exploit DB Packet Storm

240532	7.5	危険	mysource cms	-	MySource CMS の web/init_mysource.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5672	2012-09-25 15:36	2006-11-2	Show	GitHub Exploit DB Packet Storm

240533	7.5	危険	p-book	-	P-Book における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5667	2012-09-25 15:36	2006-11-2	Show	GitHub Exploit DB Packet Storm

240534	4.6	警告	IBM	-	IBM Informix Dynamic Server などの製品における "セキュリティを侵害される" 脆弱性	-	CVE-2006-5664	2012-09-25 15:36	2006-10-30	Show	GitHub Exploit DB Packet Storm

240535	7.5	危険	michel pradel	-	GestArt の aide.php3 における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5612	2012-09-25 15:36	2006-10-30	Show	GitHub Exploit DB Packet Storm

240536	5	警告	INCA Internet Corporation	-	INCA IM-204 の /cgi-bin/webcm におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-5607	2012-09-25 15:36	2006-10-30	Show	GitHub Exploit DB Packet Storm

240537	4.6	警告	IBM	-	IBM Informix Dynamic Serve などの製品における権限を取得される脆弱性	-	CVE-2006-5663	2012-09-25 15:36	2006-10-30	Show	GitHub Exploit DB Packet Storm

240538	2.1	注意	pam extern	-	PAM_extern におけるパスワードを取得される脆弱性	-	CVE-2006-5659	2012-09-25 15:36	2006-11-2	Show	GitHub Exploit DB Packet Storm

240539	7.5	危険	Free Document Management Software	-	OpenDocMan の index.php における SQL インジェクションの脆弱性	-	CVE-2006-5655	2012-09-25 15:36	2006-11-2	Show	GitHub Exploit DB Packet Storm

240540	10	危険	nmnlogger	-	NmnLogger における脆弱性	-	CVE-2006-5642	2012-09-25 15:36	2006-10-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266541	9.8	CRITICAL Network	eclipse	jetty	The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints …	CWE-284 Improper Access Control	CVE-2016-4800	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266542	6.1	MEDIUM Network	webmin	usermin	Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690.	CWE-79 Cross-site Scripting	CVE-2016-4897	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266543	6.5	MEDIUM Network	setucocms_project	setucocms	SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-4896	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266544	8.8	HIGH Network	setucocms_project	setucocms	SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors.	CWE-94 Code Injection	CVE-2016-4895	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266545	5.3	MEDIUM Network	setucocms_project	setucocms	SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-4894	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266546	8.8	HIGH Network	setucocms_project	setucocms	SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2016-4893	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266547	6.1	MEDIUM Network	setucocms_project	setucocms	Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2016-4892	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266548	8.8	HIGH Network	setucocms_project	setucocms	Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors.	CWE-352 Origin Validation Error	CVE-2016-4891	2024-11-21 11:53	2017-04-13	Show	GitHub Exploit DB Packet Storm

266549	7.0	HIGH Local	setroubleshoot_project redhat	setroubleshoot enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node	setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by…	CWE-77 Command Injection	CVE-2016-4989	2024-11-21 11:53	2017-04-12	Show	GitHub Exploit DB Packet Storm

266550	4.6	MEDIUM Physics	kernel redhat ibm	util-linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_eus powerkvm …	The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS p…	NVD-CWE-noinfo	CVE-2016-5011	2024-11-21 11:53	2017-04-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed