Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240561 7.5 危険 php script tools - PSY Auction の item.php における SQL インジェクションの脆弱性 - CVE-2006-7005 2012-09-25 15:36 2007-02-12 Show GitHub Exploit DB Packet Storm
240562 6.8 警告 php script tools - PSY Auction の email_request.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7004 2012-09-25 15:36 2007-02-12 Show GitHub Exploit DB Packet Storm
240563 5 警告 headstart solutions - Headstart Solutions の DeskPRO におけるフルパスを取得される脆弱性 - CVE-2006-7000 2012-09-25 15:36 2007-02-12 Show GitHub Exploit DB Packet Storm
240564 4.3 警告 headstart solutions - Headstart Solutions の DeskPRO における全アップロードファイルを読み取られる脆弱性 CWE-200
情報漏えい 		CVE-2006-6999 2012-09-25 15:36 2007-02-12 Show GitHub Exploit DB Packet Storm
240565 5 警告 headstart solutions - Headstart Solutions の DeskPRO における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2006-6998 2012-09-25 15:36 2007-02-12 Show GitHub Exploit DB Packet Storm
240566 10 危険 MailEnable - MailEnable の暗号機能における脆弱性 CWE-287
不適切な認証 		CVE-2006-6997 2012-09-25 15:36 2007-02-12 Show GitHub Exploit DB Packet Storm
240567 6.4 警告 indirmax.org - OzzyWork Gallery の add.asp における任意の ASP ファイルを実行される脆弱性 - CVE-2006-6994 2012-09-25 15:36 2007-02-12 Show GitHub Exploit DB Packet Storm
240568 7.8 危険 netcaptor - NetCaptor における制限された情報に他のドメインからアクセスされる脆弱性 - CVE-2006-6989 2012-09-25 15:36 2007-02-8 Show GitHub Exploit DB Packet Storm
240569 7.8 危険 phaseout - PhaseOut における他のドメインから制限情報にアクセスされる脆弱性 - CVE-2006-6986 2012-09-25 15:36 2007-02-8 Show GitHub Exploit DB Packet Storm
240570 5 警告 Maxthon - Maxthon における制限された情報に他のドメインからアクセスされる脆弱性 - CVE-2006-6985 2012-09-25 15:36 2007-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266261 6.1 MEDIUM
Network 		intel_security_mcafee endpoint_security_web_control Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security (ENS) Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site. CWE-79
Cross-site Scripting 		CVE-2016-8011 2024-11-21 11:58 2017-03-15 Show GitHub Exploit DB Packet Storm
266262 7.8 HIGH
Local 		mcafee application_control
endpoint_security 		Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local securit… CWE-284
Improper Access Control 		CVE-2016-8010 2024-11-21 11:58 2017-03-15 Show GitHub Exploit DB Packet Storm
266263 7.8 HIGH
Local 		mcafee application_control Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code executi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8009 2024-11-21 11:58 2017-03-15 Show GitHub Exploit DB Packet Storm
266264 8.8 HIGH
Local 		mcafee security_scan_plus Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8008 2024-11-21 11:58 2017-03-15 Show GitHub Exploit DB Packet Storm
266265 6.3 MEDIUM
Local 		mcafee host_intrusion_prevention_services Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services (HIPS) 8.0 Patch 7 and earlier allows authenticated users to manipulate the product's registry keys via specific condi… CWE-284
Improper Access Control 		CVE-2016-8007 2024-11-21 11:58 2017-03-15 Show GitHub Exploit DB Packet Storm
266266 6.5 MEDIUM
Network 		mcafee email_gateway File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a for… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8005 2024-11-21 11:58 2017-03-15 Show GitHub Exploit DB Packet Storm
266267 9.8 CRITICAL
Network 		exponentcms exponent_cms SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey parameter. CWE-89
SQL Injection 		CVE-2016-7789 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266268 9.8 CRITICAL
Network 		exponentcms exponent_cms SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. CWE-89
SQL Injection 		CVE-2016-7788 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266269 9.8 CRITICAL
Network 		exponentcms exponent_cms SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the s… CWE-89
SQL Injection 		CVE-2016-7784 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm
266270 9.8 CRITICAL
Network 		exponentcms exponent_cms SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter. CWE-89
SQL Injection 		CVE-2016-7783 2024-11-21 11:58 2017-03-8 Show GitHub Exploit DB Packet Storm