Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240581 7.5 危険 Joomla! - Joomla! 用の Colophon における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3969 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240582 7.5 危険 moskool - MamboXChange Moskool における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3967 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240583 7.5 危険 Mambo Foundation - bayesiannaivefilter コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3962 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240584 6.8 警告 マカフィー - McAfee Security Center などの製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-3961 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240585 7.5 危険 miniBB - MiniBB Forum における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3955 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240586 5 警告 mybulletinboard - MyBB の usercp.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3954 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240587 4.3 警告 mybulletinboard - MyBB の usercp.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3953 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240588 7.5 危険 mam-moodle alpha component - Mambo 用の Mam-moodle alpha コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3951 2012-09-25 15:35 2006-07-10 Show GitHub Exploit DB Packet Storm
240589 6.8 警告 Mambo Foundation - Mambo 用の artlinks コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3949 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
240590 6.8 警告 Mambo Foundation - Mambo 用の Mambatstaff における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3947 2012-09-25 15:35 2006-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268651 7.8 HIGH
Local 		google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (with Fingerprint support) software. The check of an application's signature can be bypassed during installation. The Sams… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2016-11044 2024-11-21 11:45 2020-04-7 Show GitHub Exploit DB Packet Storm
268652 7.5 HIGH
Network 		google android An issue was discovered on Samsung mobile devices with M(6.0) software. The S/MIME implementation in EAS uses DES (where 3DES is intended). The Samsung ID is SVE-2016-5871 (June 2016). CWE-326
Inadequate Encryption Strength 		CVE-2016-11043 2024-11-21 11:45 2020-04-7 Show GitHub Exploit DB Packet Storm
268653 7.5 HIGH
Network 		google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. There is a SIM Lock bypass. The Samsung ID is SVE-2016-5381 (June 2016). CWE-287
Improper Authentication 		CVE-2016-11042 2024-11-21 11:45 2020-04-7 Show GitHub Exploit DB Packet Storm
268654 4.6 MEDIUM
Physics 		google android An issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the lockscreen by sending an AT command over USB. The Samsung ID is SVE-2015-5301 (June 2016). CWE-287
Improper Authentication 		CVE-2016-11041 2024-11-21 11:45 2020-04-7 Show GitHub Exploit DB Packet Storm
268655 9.8 CRITICAL
Network 		odata4j_project odata4j odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued. CWE-89
SQL Injection 		CVE-2016-11024 2024-11-21 11:45 2020-03-31 Show GitHub Exploit DB Packet Storm
268656 9.8 CRITICAL
Network 		odata4j_project odata4j odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued. CWE-89
SQL Injection 		CVE-2016-11023 2024-11-21 11:45 2020-03-31 Show GitHub Exploit DB Packet Storm
268657 7.2 HIGH
Network 		netgear prosafe_wc9500_firmware
prosafe_wc7600_firmware
prosafe_wc7520_firmware 		NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login… CWE-78
OS Command  		CVE-2016-11022 2024-11-21 11:45 2020-03-24 Show GitHub Exploit DB Packet Storm
268658 6.5 MEDIUM
Network 		zohocorp manageengine_password_manager_pro In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service. CWE-200
Information Exposure 		CVE-2016-1159 2024-11-21 11:45 2020-03-10 Show GitHub Exploit DB Packet Storm
268659 7.2 HIGH
Network 		dlink dcs-930l_firmware setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter. CWE-78
OS Command  		CVE-2016-11021 2024-11-21 11:45 2020-03-9 Show GitHub Exploit DB Packet Storm
268660 9.8 CRITICAL
Network 		kunena kunena Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-11020 2024-11-21 11:45 2020-02-26 Show GitHub Exploit DB Packet Storm