Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240711 7.5 危険 lodel - patchlodel の calcul-page.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5422 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240712 5 警告 Kerio Technologies - Kerio WinRoute Firewall におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5420 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240713 5 警告 マカフィー - Internet Security Suite などの McAfee 製品におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5417 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240714 7.5 危険 news defilante horizontale - News phpBB 用の Defilante Horizontale モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5415 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240715 5.1 警告 PHP Outburst - PHP Outburst Easynews の admin.php における認証を回避される脆弱性 - CVE-2006-5412 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240716 7.5 危険 justin white - FreeWPS 用の upload.php における任意の PHP プログラムをアップロードされる脆弱性 - CVE-2006-5411 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240717 7.5 危険 mobilesecure inc - Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおける SQL インジェクションの脆弱性 - CVE-2006-5409 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240718 5.1 警告 mobilesecure inc - Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5408 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240719 7.5 危険 osTicket - osTicket の open_form.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5407 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240720 3.6 注意 passgo - Passgo Defender における重要なファイルを変更される脆弱性 - CVE-2006-5406 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266211 9.8 CRITICAL
Network 		php php ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial … CWE-20
 Improper Input Validation  		CVE-2016-7417 2024-11-21 11:57 2016-09-18 Show GitHub Exploit DB Packet Storm
266212 7.5 HIGH
Network 		php php ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote atta… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7416 2024-11-21 11:57 2016-09-18 Show GitHub Exploit DB Packet Storm
266213 9.8 CRITICAL
Network 		icu-project international_components_for_unicode Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (applicat… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7415 2024-11-21 11:57 2016-09-18 Show GitHub Exploit DB Packet Storm
266214 9.8 CRITICAL
Network 		php php The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7414 2024-11-21 11:57 2016-09-18 Show GitHub Exploit DB Packet Storm
266215 9.8 CRITICAL
Network 		php php Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have uns… CWE-416
 Use After Free 		CVE-2016-7413 2024-11-21 11:57 2016-09-18 Show GitHub Exploit DB Packet Storm
266216 8.1 HIGH
Network 		php php ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of servi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7412 2024-11-21 11:57 2016-09-18 Show GitHub Exploit DB Packet Storm
266217 9.8 CRITICAL
Network 		php php ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspe… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7411 2024-11-21 11:57 2016-09-18 Show GitHub Exploit DB Packet Storm
266218 9.8 CRITICAL
Network 		adobe acrobat
acrobat_dc
acrobat_reader_dc
reader 		Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on… CWE-416
 Use After Free 		CVE-2016-6938 2024-11-21 11:57 2016-09-17 Show GitHub Exploit DB Packet Storm
266219 9.8 CRITICAL
Network 		adobe acrobat
acrobat_dc
acrobat_reader_dc
reader 		Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attacker… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6937 2024-11-21 11:57 2016-09-17 Show GitHub Exploit DB Packet Storm
266220 5.9 MEDIUM
Network 		cryptopp crypto\+\+ Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow c… CWE-200
Information Exposure 		CVE-2016-7420 2024-11-21 11:57 2016-09-16 Show GitHub Exploit DB Packet Storm