Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240551 5 警告 malbum - mAlbum の index.php におけるインストールパスを取得される脆弱性 - CVE-2006-6069 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240552 7.5 危険 ネットギア - NetGear WG311v1 ワイヤレスアダプタ用のワイヤレスドライバにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-6125 2012-09-25 15:36 2004-01-30 Show GitHub Exploit DB Packet Storm
240553 2.6 注意 malbum - mAlbum の functions.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6068 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240554 5.1 警告 mxbb - MxBB Portal 用の CalSnails Module における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6065 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240555 4.9 警告 Linux - Linux kernel の NTFS filesystem code におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6060 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240556 10 危険 ネットギア - NetGear MA521 PCMCIA アダプタ用の MA521nd5.SYS ドライバにおけるバッファオーバーフローの脆弱性 - CVE-2006-6059 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240557 4.9 警告 Linux - Fedora Core 6 などの Linux kernel におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6057 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240558 5 警告 netepi case manager - NetEpi Case Manager における有効なユーザ名を列挙される脆弱性 - CVE-2006-6052 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240559 7.5 危険 mamboxchange - Mambo 用の reporter コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6051 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240560 7.5 危険 phil taylor - Mambo 用の shambo2 コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6049 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266481 5.4 MEDIUM
Network 		redhat jboss_bpm_suite JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /d… - CVE-2016-6343 2024-11-21 11:55 2018-10-31 Show GitHub Exploit DB Packet Storm
266482 7.5 HIGH
Network 		epic mychart XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.as… CWE-91
Blind XPath Injection 		CVE-2016-6272 2024-11-21 11:55 2018-02-21 Show GitHub Exploit DB Packet Storm
266483 7.8 HIGH
Local 		foxitsoftware foxit_reader
phantompdf 		Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentiall… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6169 2024-11-21 11:55 2018-02-8 Show GitHub Exploit DB Packet Storm
266484 7.8 HIGH
Local 		foxitsoftware foxit_reader
phantompdf 		Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a … CWE-416
 Use After Free 		CVE-2016-6168 2024-11-21 11:55 2018-02-8 Show GitHub Exploit DB Packet Storm
266485 6.1 MEDIUM
Network 		sophos puremessage Cross-site scripting (XSS) vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2016-6217 2024-11-21 11:55 2018-01-27 Show GitHub Exploit DB Packet Storm
266486 4.3 MEDIUM
Network 		ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
rational_engineering_lifecycle_manager
rational_rhapsody_design_manager
rational_software_architect_design… 		IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages. IBM X-Force ID: 116868. CWE-200
Information Exposure 		CVE-2016-6024 2024-11-21 11:55 2017-11-28 Show GitHub Exploit DB Packet Storm
266487 9.8 CRITICAL
Network 		jantek jtc-200_firmware An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service witho… CWE-287
Improper Authentication 		CVE-2016-5791 2024-11-21 11:55 2017-10-13 Show GitHub Exploit DB Packet Storm
266488 8.0 HIGH
Network 		jantek jtc-200_firmware A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active sess… CWE-352
 Origin Validation Error 		CVE-2016-5789 2024-11-21 11:55 2017-10-13 Show GitHub Exploit DB Packet Storm
266489 7.0 HIGH
Local 		google android drivers/net/ethernet/msm/rndis_ipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted application compromising a privileged process. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-5868 2024-11-21 11:55 2017-09-26 Show GitHub Exploit DB Packet Storm
266490 7.3 HIGH
Network 		automatedlogic
carrier 		i-vu
sitescan_web
automatedlogic_webctrl 		An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker cou… CWE-611
XXE 		CVE-2016-5795 2024-11-21 11:55 2017-09-1 Show GitHub Exploit DB Packet Storm