Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240791 5 警告 hotplug cms - HotPlug CMS における管理者用パスワードを読まれる脆弱性 - CVE-2006-4772 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240792 4.3 警告 jbc - ForumJBC の haut.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4771 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240793 7.5 危険 miniportal - MiniPort@l の menu.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4770 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240794 5 警告 ネットギア - NETGEAR DG834GT Wireless ADSL ルータにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4765 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240795 7.5 危険 openbb - Open Bulletin Board (OpenBB) における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4722 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240796 7.5 危険 mcgallery - mcGalleryPRO の random2.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4720 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240797 5.1 警告 myabracadaweb - MyABraCaDaWeb における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4719 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240798 6.8 警告 korviblog - KorviBlog の livre_or.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4718 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240799 4.3 警告 NewsGator Technologies, Inc. - NewsGator FeedDemon におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4710 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240800 6.8 警告 mybulletinboard - MyBB の admin/global.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4707 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266341 6.5 MEDIUM
Network
redhat openshift The API server in Kubernetes, as used in Red Hat OpenShift Enterprise 3.2, in a multi tenant environment allows remote authenticated users with knowledge of other project names to obtain sensitive pr… CWE-200
Information Exposure
CVE-2016-5392 2024-11-21 11:54 2016-08-6 Show GitHub Exploit DB Packet Storm
266342 8.8 HIGH
Network
crestron dm-txrx-100-str_firmware Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of ar… CWE-352
 Origin Validation Error
CVE-2016-5671 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266343 9.8 CRITICAL
Network
crestron dm-txrx-100-str_firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access vi… CWE-255
Credentials Management
CVE-2016-5670 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266344 9.8 CRITICAL
Network
crestron dm-txrx-100-str_firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an OpenSSL Test Certification Authority, which makes it easier… NVD-CWE-Other
CVE-2016-5669 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266345 9.8 CRITICAL
Network
crestron dm-txrx-100-str_firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON API call. NVD-CWE-Other
CVE-2016-5668 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266346 9.8 CRITICAL
Network
crestron dm-txrx-100-str_firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page other than index.html. NVD-CWE-Other
CVE-2016-5667 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266347 9.8 CRITICAL
Network
crestron dm-txrx-100-str_firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of obj… NVD-CWE-Other
CVE-2016-5666 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266348 9.8 CRITICAL
Network
crestron airmedia_am-100_firmware Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in t… CWE-77
Command Injection
CVE-2016-5640 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266349 7.5 HIGH
Network
crestron airmedia_am-100_firmware Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src … CWE-22
Path Traversal
CVE-2016-5639 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm
266350 5.5 MEDIUM
Local
canonical
oracle
qemu
debian
redhat
ubuntu_linux
vm_server
linux
qemu
debian_linux
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server_tus
openstack
en…
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without w… CWE-400
 Uncontrolled Resource Consumption
CVE-2016-5403 2024-11-21 11:54 2016-08-3 Show GitHub Exploit DB Packet Storm