Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240771	4.3	警告	jupiter cms	-	Jupiter CMS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4874	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240772	5	警告	jupiter cms	-	Jupiter CMS における重要な情報を取得される脆弱性	-	CVE-2006-4873	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240773	7.5	危険	keyvan1	-	Keyvan1 ECardPro の search.asp における SQL インジェクションの脆弱性	-	CVE-2006-4872	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240774	7.5	危険	keyvan1	-	Keyvan1 EShoppingPro の search_run.asp における SQL インジェクションの脆弱性	-	CVE-2006-4871	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240775	7.5	危険	perlunity	-	phpunity.postcard の phpunity-postcard.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-4869	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240776	7.5	危険	mohammed mehdi panjwani	-	Mohammed Mehdi Panjwani Complain Center の loginprocess.asp における SQL インジェクションの脆弱性	-	CVE-2006-4861	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240777	10	危険	limbo cms	-	Limbo CMS の index.php などにおける脆弱性	-	CVE-2006-4860	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240778	7.5	危険	limbo cms	-	Limbo CMS の contact コンポーネントにおける images/contact フォルダへ PHP コードをアップロードされる脆弱性	-	CVE-2006-4859	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240779	6.8	警告	mamboxchange	-	Mambo 用の serverstat コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-4858	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240780	7.5	危険	haberx	-	Haberx の kategorix.asp における SQL インジェクションの脆弱性	-	CVE-2006-4853	2012-09-25 15:35	2006-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269011	6.4	MEDIUM Network	kippo-graph_project	kippo-graph	In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.class.php.	CWE-79 Cross-site Scripting	CVE-2016-2138	2024-11-21 11:47	2022-07-29	Show	GitHub Exploit DB Packet Storm

269012	9.8	CRITICAL Network	pam_tacplus_project	pam_tacplus	In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.	NVD-CWE-Other	CVE-2016-20014	2024-11-21 11:47	2022-04-21	Show	GitHub Exploit DB Packet Storm

269013	7.5	HIGH Network	sha256crypt_project sha512crypt_project	sha256crypt sha512crypt	sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2016-20013	2024-11-21 11:47	2022-02-19	Show	GitHub Exploit DB Packet Storm

269014	5.9	MEDIUM Network	samba debian fedoraproject redhat canonical	samba debian_linux fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_for_scientific_computing enterprise_linux enterprise_linux_server enterprise_l…	A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.	CWE-287 Improper Authentication	CVE-2016-2124	2024-11-21 11:47	2022-02-19	Show	GitHub Exploit DB Packet Storm

269015	5.3	MEDIUM Network	openbsd netapp	openssh ontap_select_deploy_administration_utility clustered_data_ontap solidfire hci_management_node	OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occu…	NVD-CWE-Other	CVE-2016-20012	2024-11-21 11:47	2021-09-16	Show	GitHub Exploit DB Packet Storm

269016	7.5	HIGH Network	gnome	libgrss	libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the…	CWE-295 Improper Certificate Validation	CVE-2016-20011	2024-11-21 11:47	2021-05-26	Show	GitHub Exploit DB Packet Storm

269017	10.0	CRITICAL Network	ewww	image_optimizer	EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.	NVD-CWE-noinfo	CVE-2016-20010	2024-11-21 11:47	2021-05-5	Show	GitHub Exploit DB Packet Storm

269018	9.8	CRITICAL Network	windriver siemens	vxworks sgt-100_firmware sgt-200_firmware sgt-300_firmware sgt-400_firmware sgt-a20_firmware sgt-a35_firmware sgt-a65_firmware	A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer	CWE-787 Out-of-bounds Write	CVE-2016-20009	2024-11-21 11:47	2021-03-12	Show	GitHub Exploit DB Packet Storm

269019	9.8	CRITICAL Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-863 Incorrect Authorization	CVE-2016-20005	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

269020	9.8	CRITICAL Network	rest\/json_project	rest\/json	The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-863 Incorrect Authorization	CVE-2016-20004	2024-11-21 11:47	2021-01-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed