Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240711 7.5 危険 lodel - patchlodel の calcul-page.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5422 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240712 5 警告 Kerio Technologies - Kerio WinRoute Firewall におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5420 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240713 5 警告 マカフィー - Internet Security Suite などの McAfee 製品におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5417 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240714 7.5 危険 news defilante horizontale - News phpBB 用の Defilante Horizontale モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5415 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240715 5.1 警告 PHP Outburst - PHP Outburst Easynews の admin.php における認証を回避される脆弱性 - CVE-2006-5412 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240716 7.5 危険 justin white - FreeWPS 用の upload.php における任意の PHP プログラムをアップロードされる脆弱性 - CVE-2006-5411 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240717 7.5 危険 mobilesecure inc - Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおける SQL インジェクションの脆弱性 - CVE-2006-5409 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240718 5.1 警告 mobilesecure inc - Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5408 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
240719 7.5 危険 osTicket - osTicket の open_form.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5407 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
240720 3.6 注意 passgo - Passgo Defender における重要なファイルを変更される脆弱性 - CVE-2006-5406 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266331 5.4 MEDIUM
Network
redhat
openstack
openstack
manila
Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in t… CWE-79
Cross-site Scripting
CVE-2016-6519 2024-11-21 11:56 2017-04-22 Show GitHub Exploit DB Packet Storm
266332 9.8 CRITICAL
Network
google android The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-6727 2024-11-21 11:56 2017-04-18 Show GitHub Exploit DB Packet Storm
266333 9.8 CRITICAL
Network
google android Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices. NVD-CWE-noinfo
CVE-2016-6726 2024-11-21 11:56 2017-04-18 Show GitHub Exploit DB Packet Storm
266334 7.5 HIGH
Network
redhat
canonical
nettle_project
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
ubuntu_linux
nettle
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack. CWE-203
 Information Exposure Through Discrepancy
CVE-2016-6489 2024-11-21 11:56 2017-04-15 Show GitHub Exploit DB Packet Storm
266335 9.8 CRITICAL
Network
sap business_intelligence_platform SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), … CWE-89
SQL Injection
CVE-2016-6818 2024-11-21 11:56 2017-04-14 Show GitHub Exploit DB Packet Storm
266336 9.8 CRITICAL
Network
apache tomcat_jk_connector Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-6808 2024-11-21 11:56 2017-04-13 Show GitHub Exploit DB Packet Storm
266337 8.8 HIGH
Network
apache hadoop In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-6811 2024-11-21 11:56 2017-04-11 Show GitHub Exploit DB Packet Storm
266338 7.5 HIGH
Network
cloudera cdh Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization. CWE-284
Improper Access Control
CVE-2016-6605 2024-11-21 11:56 2017-04-10 Show GitHub Exploit DB Packet Storm
266339 7.5 HIGH
Network
opmantek network_management_information_system Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations. CWE-77
Command Injection
CVE-2016-6534 2024-11-21 11:56 2017-04-10 Show GitHub Exploit DB Packet Storm
266340 5.9 MEDIUM
Network
apache ignite Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents. CWE-611
XXE
CVE-2016-6805 2024-11-21 11:56 2017-04-8 Show GitHub Exploit DB Packet Storm