Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240561 7.5 危険 moderngigabyte - ModernGigabyte ModernBill における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4034 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
240562 5.1 警告 Schezo - Lhaplus の Lhaplus.exe におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4033 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
240563 5 警告 The PHP Group - PHP の ip2long 関数におけるネットワーク情報を取得される脆弱性 - CVE-2006-4023 2012-09-25 15:35 2006-08-8 Show GitHub Exploit DB Packet Storm
240564 4.3 警告 inter network marketing ag - INM CMS G3 の search モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4017 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
240565 5 警告 ヒューレット・パッカード - HP ProCurve スイッチにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4015 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
240566 2.6 注意 Kayako - Kayako eSupport における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4011 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
240567 7.5 危険 knusperleicht - Knusperleicht Faq の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4008 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
240568 7.5 危険 knusperleicht - Knusperleicht Guestbook の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4007 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
240569 5 警告 hobbit monitor - Henrik Storner Hobbit モニタの config メソッドにおける重要な情報を取得される脆弱性 - CVE-2006-4003 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
240570 4.6 警告 インターネット セキュリティ システムズ - ISS BlackICE PC Protection における BlackICE を破壊される脆弱性 - CVE-2006-3999 2012-09-25 15:35 2006-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266861 6.1 MEDIUM
Network
ibm inotes
domino
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cred… CWE-79
Cross-site Scripting
CVE-2016-2938 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266862 9.1 CRITICAL
Network
ibm security_access_manager_9.0_firmware
security_access_manager_for_mobile_8.0_firmware
security_access_manager_for_web_8.0_firmware
IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker… CWE-611
XXE
CVE-2016-2908 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
266863 5.6 MEDIUM
Network
saltstack salt Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with … CWE-287
Improper Authentication
CVE-2016-3176 2024-11-21 11:49 2017-02-1 Show GitHub Exploit DB Packet Storm
266864 9.8 CRITICAL
Network
giflib_project giflib Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors. CWE-415
CWE-416
 Double Free
 Use After Free
CVE-2016-3177 2024-11-21 11:49 2017-01-24 Show GitHub Exploit DB Packet Storm
266865 9.8 CRITICAL
Network
ivanti landesk_management_suite Buffer overflow in the collector.exe listener of the Landesk Management Suite 10.0.0.271 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a lar… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3147 2024-11-21 11:49 2017-01-24 Show GitHub Exploit DB Packet Storm
266866 9.1 CRITICAL
Network
synacor zimbra_collaboration_suite Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276. CWE-502
 Deserialization of Untrusted Data
CVE-2016-3415 2024-11-21 11:49 2017-01-19 Show GitHub Exploit DB Packet Storm
266867 6.5 MEDIUM
Network
synacor zimbra_collaboration_suite Unspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, aka bug 102029. NVD-CWE-noinfo
CVE-2016-3414 2024-11-21 11:49 2017-01-19 Show GitHub Exploit DB Packet Storm
266868 7.5 HIGH
Network
synacor zimbra_collaboration_suite Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996. NVD-CWE-noinfo
CVE-2016-3413 2024-11-21 11:49 2017-01-19 Show GitHub Exploit DB Packet Storm
266869 6.1 MEDIUM
Network
synacor zimbra_collaboration_suite Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103997, 104413… CWE-79
Cross-site Scripting
CVE-2016-3412 2024-11-21 11:49 2017-01-19 Show GitHub Exploit DB Packet Storm
266870 6.1 MEDIUM
Network
synacor zimbra_collaboration_suite Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 103609. CWE-79
Cross-site Scripting
CVE-2016-3411 2024-11-21 11:49 2017-01-19 Show GitHub Exploit DB Packet Storm