Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240631 7.5 危険 mobilesecure inc - Highwall Enterprise などで使用される管理インターフェースにおける SQL インジェクションの脆弱性 - CVE-2006-5744 2012-09-25 15:36 2006-11-6 Show GitHub Exploit DB Packet Storm
240632 4.3 警告 mobilesecure - Highwall Enterprise などの管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5743 2012-09-25 15:36 2006-11-6 Show GitHub Exploit DB Packet Storm
240633 7.5 危険 leicestershire - Leicestershire communityPortals の cpadmin/cpa_index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5739 2012-09-25 15:36 2006-11-6 Show GitHub Exploit DB Packet Storm
240634 6.4 警告 lithium cms - Lithium CMS の classes/index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5731 2012-09-25 15:36 2006-11-6 Show GitHub Exploit DB Packet Storm
240635 5.1 警告 MODX - Modx CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5730 2012-09-25 15:36 2006-11-6 Show GitHub Exploit DB Packet Storm
240636 2.1 注意 mirabilis - ICQ の "Answering Service" 関数におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-5724 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
240637 5.1 警告 middlebury college - Segue CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5722 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
240638 4.3 警告 mirapoint - Mirapoint WebMail におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5712 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
240639 7.2 危険 The PHP Group - PHP における open_basedir 制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2006-5706 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
240640 6.2 警告 ヒューレット・パッカード - HP NonStop Server における任意のファイルを読まれる脆弱性 - CVE-2006-5704 2012-09-25 15:36 2006-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266321 7.5 HIGH
Network 		apache tomcat The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6817 2024-11-21 11:56 2017-08-11 Show GitHub Exploit DB Packet Storm
266322 7.5 HIGH
Network 		apache
debian
netapp
canonical
oracle
redhat 		tomcat
debian_linux
snap_creator_framework
oncommand_insight
oncommand_shift
ubuntu_linux
tekelec_platform_distribution
enterprise_linux_desktop
enterprise_linux_workstation 		A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via… NVD-CWE-noinfo
CVE-2016-6796 2024-11-21 11:56 2017-08-11 Show GitHub Exploit DB Packet Storm
266323 7.5 HIGH
Network 		apache
oracle
debian
netapp
canonical
redhat 		tomcat
tekelec_platform_distribution
debian_linux
snap_creator_framework
oncommand_insight
oncommand_shift
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_workstation 		The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global J… CWE-863
 Incorrect Authorization 		CVE-2016-6797 2024-11-21 11:56 2017-08-11 Show GitHub Exploit DB Packet Storm
266324 6.1 MEDIUM
Network 		apache cxf The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the availa… CWE-79
Cross-site Scripting 		CVE-2016-6812 2024-11-21 11:56 2017-08-11 Show GitHub Exploit DB Packet Storm
266325 5.3 MEDIUM
Network 		apache
debian
redhat
netapp
canonical
oracle 		tomcat
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
jboss_enterprise_web_server
enterprise_linux_eus
enterprise_linux_server_tus
… 		When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.R… NVD-CWE-noinfo
CVE-2016-6794 2024-11-21 11:56 2017-08-11 Show GitHub Exploit DB Packet Storm
266326 9.8 CRITICAL
Network 		apache sling In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts whic… CWE-611
XXE 		CVE-2016-6798 2024-11-21 11:56 2017-07-20 Show GitHub Exploit DB Packet Storm
266327 9.1 CRITICAL
Network 		apache wicket The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the pe… CWE-502
 Deserialization of Untrusted Data 		CVE-2016-6793 2024-11-21 11:56 2017-07-17 Show GitHub Exploit DB Packet Storm
266328 9.8 CRITICAL
Network 		cloudfoundry cf-mysql-release
cf-release 		An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a comm… CWE-77
Command Injection 		CVE-2016-6655 2024-11-21 11:56 2017-06-13 Show GitHub Exploit DB Packet Storm
266329 7.5 HIGH
Network 		bluecoat proxysg
cacheflow
advanced_secure_gateway 		Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning. CWE-254
 7PK - Security Features 		CVE-2016-6594 2024-11-21 11:56 2017-06-9 Show GitHub Exploit DB Packet Storm
266330 7.5 HIGH
Network 		apache cordova Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to these methods (Log.v(), Log.d(), Log.i(), Log.w(), and Log.e()) are stored in a s… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2016-6799 2024-11-21 11:56 2017-05-10 Show GitHub Exploit DB Packet Storm