Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240681 5 警告 Niels Provos - Niels Provos Honeyd におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4292 2012-09-25 15:35 2006-08-19 Show GitHub Exploit DB Packet Storm
240682 5.1 警告 phlymail - PHlyMail Lite の handlers/email/mod.listmail.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4291 2012-09-25 15:35 2006-08-22 Show GitHub Exploit DB Packet Storm
240683 6.8 警告 Mambo Foundation - Mambo の a6mambocredits コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4288 2012-09-25 15:35 2006-08-22 Show GitHub Exploit DB Packet Storm
240684 7.5 危険 nes game - NES Game などの製品における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4287 2012-09-25 15:35 2006-08-22 Show GitHub Exploit DB Packet Storm
240685 7.5 危険 lblog - LBlog の comments.asp における SQL インジェクションの脆弱性 - CVE-2006-4284 2012-09-25 15:35 2006-08-22 Show GitHub Exploit DB Packet Storm
240686 7.5 危険 mamboxchange - Mambo 用の mambowiki コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4282 2012-09-25 15:35 2006-08-22 Show GitHub Exploit DB Packet Storm
240687 7.5 危険 Mambo Foundation - Mambo の catalogshop コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4275 2012-09-25 15:35 2006-08-21 Show GitHub Exploit DB Packet Storm
240688 6.8 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4273 2012-09-25 15:35 2006-08-3 Show GitHub Exploit DB Packet Storm
240689 6.8 警告 Mambo Foundation - Mambo 用の mambelfish コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4270 2012-09-25 15:35 2006-08-21 Show GitHub Exploit DB Packet Storm
240690 5 警告 カスペルスキー - Kaspersky Anti-Hacker における ICMP へのレスポンスを取得される脆弱性 - CVE-2006-4265 2012-09-25 15:35 2006-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266451 9.1 CRITICAL
Network
envirosys esc_8832_data_controller Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via … CWE-284
Improper Access Control
CVE-2016-4501 2024-11-21 11:52 2016-05-31 Show GitHub Exploit DB Packet Storm
266452 5.3 MEDIUM
Network
ivanti connect_secure Pulse Connect Secure (PCS) 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors. NVD-CWE-noinfo
CVE-2016-4792 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266453 8.6 HIGH
Network
pulsesecure
ivanti
pulse_connect_secure
connect_secure
The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arb… NVD-CWE-noinfo
CVE-2016-4791 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266454 5.5 MEDIUM
Network
pulsesecure
ivanti
pulse_connect_secure
connect_secure
Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote… CWE-79
Cross-site Scripting
CVE-2016-4790 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266455 6.1 MEDIUM
Network
pulsesecure
ivanti
pulse_connect_secure
connect_secure
Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, a… CWE-79
Cross-site Scripting
CVE-2016-4789 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266456 5.8 MEDIUM
Network
ivanti
pulsesecure
connect_secure
pulse_connect_secure
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors. NVD-CWE-noinfo
CVE-2016-4788 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266457 10.0 CRITICAL
Network
ivanti
pulsesecure
connect_secure
pulse_connect_secure
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified direct… NVD-CWE-noinfo
CVE-2016-4787 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266458 7.5 HIGH
Network
pulsesecure
ivanti
pulse_connect_secure
connect_secure
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. NVD-CWE-noinfo
CVE-2016-4786 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266459 6.1 MEDIUM
Network
huawei ath_firmware
ath
rio_firmware
plk_firmware
cherryplus_firmware
cherryplus
Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 befo… CWE-79
Cross-site Scripting
CVE-2016-4575 2024-11-21 11:52 2016-05-26 Show GitHub Exploit DB Packet Storm
266460 6.1 MEDIUM
Network
lenovo shareit Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universa… CWE-79
Cross-site Scripting
CVE-2016-4783 2024-11-21 11:52 2016-05-24 Show GitHub Exploit DB Packet Storm