Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240541 5.1 警告 ちとらソフト - Lhaz におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4116 2012-09-25 15:35 2006-08-14 Show GitHub Exploit DB Packet Storm
240542 5.1 警告 hitweb - Brian Fraval hitweb の genpage-cgi.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4113 2012-09-25 15:35 2006-08-14 Show GitHub Exploit DB Packet Storm
240543 4.3 警告 mojoscripts - mojoscripts.com mojoGallery の admin.cgi におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4104 2012-09-25 15:35 2006-08-14 Show GitHub Exploit DB Packet Storm
240544 7.5 危険 jason alexander - Jason Alexander phNNTP の article-raw.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4103 2012-09-25 15:35 2006-08-14 Show GitHub Exploit DB Packet Storm
240545 4.3 警告 mojoscripts - mojoscripts.com mojoGallery の admin.cgi におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4087 2012-09-25 15:35 2006-08-11 Show GitHub Exploit DB Packet Storm
240546 4.3 警告 ozjournals - Elaine Aquino OZJournals の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4086 2012-09-25 15:35 2006-08-11 Show GitHub Exploit DB Packet Storm
240547 7.5 危険 olaf noehring - Olaf Noehring TSEP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4085 2012-09-25 15:35 2006-08-11 Show GitHub Exploit DB Packet Storm
240548 7.5 危険 mywebland - myWebland myEvent の viewevent.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4083 2012-09-25 15:35 2006-08-11 Show GitHub Exploit DB Packet Storm
240549 6.8 警告 Joomla! - Joomla! 用の JD-Wiki コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4074 2012-09-25 15:35 2006-08-10 Show GitHub Exploit DB Packet Storm
240550 2.6 注意 マイクロソフト - Microsoft Windows XP などの GDI ライブラリ におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4071 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268251 8.8 HIGH
Network 		google
debian
redhat
suse
opensuse 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse 		The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to … NVD-CWE-Other
CVE-2016-1701 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268252 6.5 MEDIUM
Network 		debian
redhat
suse
opensuse
google 		debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse
chrome 		The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to… CWE-200
Information Exposure 		CVE-2016-1698 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268253 8.8 HIGH
Network 		google
debian
redhat
suse
opensuse 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse 		The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors. CWE-254
CWE-284
 7PK - Security Features
Improper Access Control 		CVE-2016-1696 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268254 8.8 HIGH
Network 		google
debian
canonical
redhat
suse
opensuse 		chrome
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse 		Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. NVD-CWE-noinfo
CVE-2016-1695 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268255 7.5 HIGH
Network 		debian
redhat
suse
opensuse
google 		debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse
chrome 		extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cau… NVD-CWE-Other
CVE-2016-1700 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268256 6.5 MEDIUM
Network 		debian
canonical
redhat
suse
opensuse
google 		debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse
chrome 		WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl paramet… CWE-284
Improper Access Control 		CVE-2016-1699 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268257 8.8 HIGH
Network 		google
debian
canonical
redhat
suse
opensuse 		chrome
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse 		The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detac… CWE-284
Improper Access Control 		CVE-2016-1697 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268258 5.3 MEDIUM
Network 		google
debian
redhat
suse
opensuse 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse 		browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid … CWE-284
Improper Access Control 		CVE-2016-1694 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268259 5.3 MEDIUM
Network 		debian
redhat
suse
opensuse
google 		debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse
chrome 		browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to… CWE-284
Improper Access Control 		CVE-2016-1693 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm
268260 5.3 MEDIUM
Network 		debian
canonical
redhat
suse
opensuse
google 		debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
linux_enterprise
leap
opensuse
chrome 		WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet downl… CWE-284
Improper Access Control 		CVE-2016-1692 2024-11-21 11:46 2016-06-6 Show GitHub Exploit DB Packet Storm