Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240801 4.9 警告 ヒューレット・パッカード - Mercury SiteScope におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5122 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
240802 5.1 警告 KGB - KGB の kgcall.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5115 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
240803 7.5 危険 intervations - InterVations NaviCOPA Web Server におけるバッファオーバーフローの脆弱性 - CVE-2006-5112 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
240804 5 警告 Libksba project - SUSE LINUX 上の newpg パッケージの gpgsm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5111 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
240805 6.8 警告 php invoice - PHP Invoice の home.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5110 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
240806 7.5 危険 vBulletin Solutions, Inc. - Jelsoft vBulletin の global.php における SQL インジェクションの脆弱性 - CVE-2006-5104 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
240807 7.5 危険 Netwin Ltd - WEB//NEWS の parse/parser.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5100 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
240808 7.5 危険 paul schudar - TagIt! Tagboard の Tagmin Control Center における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5093 2012-09-25 15:36 2006-09-29 Show GitHub Exploit DB Packet Storm
240809 6.8 警告 phoenix evolution - PECMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5090 2012-09-25 15:36 2006-09-29 Show GitHub Exploit DB Packet Storm
240810 7.5 危険 jl webworks - QB の acc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5081 2012-09-25 15:36 2006-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269091 5.5 MEDIUM
Local
ibm security_access_manager_for_web_7.0_firmware
security_access_manager_for_web_8.0_firmware
security_access_manager_for_mobile
security_access_manager_9.0_firmware
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specia… CWE-284
Improper Access Control
CVE-2016-3020 2024-11-21 11:49 2017-02-8 Show GitHub Exploit DB Packet Storm
269092 5.5 MEDIUM
Local
uclouvain openjpeg The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file. CWE-125
Out-of-bounds Read
CVE-2016-3183 2024-11-21 11:49 2017-02-4 Show GitHub Exploit DB Packet Storm
269093 5.4 MEDIUM
Network
ibm biginsights IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially… CWE-79
Cross-site Scripting
CVE-2016-2992 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
269094 7.5 HIGH
Network
ibm urbancode_deploy IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine. CWE-284
Improper Access Control
CVE-2016-2942 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
269095 5.5 MEDIUM
Local
ibm urbancode_deploy IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user. CWE-200
Information Exposure
CVE-2016-2941 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
269096 5.4 MEDIUM
Network
ibm biginsights IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted UR… CWE-79
Cross-site Scripting
CVE-2016-2924 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
269097 7.8 HIGH
Local
ibm aix IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-3053 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
269098 2.7 LOW
Network
ibm security_access_manager_for_web_8.0_firmware
security_access_manager_for_mobile
security_access_manager_9.0_firmware
IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end da… CWE-89
SQL Injection
CVE-2016-3046 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
269099 3.7 LOW
Network
ibm security_access_manager
security_access_manager_for_mobile
security_access_manager_for_web
IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer he… CWE-200
Information Exposure
CVE-2016-3045 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm
269100 5.9 MEDIUM
Network
ibm security_access_manager_for_web_7.0_firmware
security_access_manager_for_web_8.0_firmware
security_access_manager_for_mobile
security_access_manager_9.0_firmware
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit t… CWE-200
Information Exposure
CVE-2016-3043 2024-11-21 11:49 2017-02-2 Show GitHub Exploit DB Packet Storm