Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240811 5.1 警告 openi-cms group - OPENi-CMS の openi-admin/base/fileloader.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4750 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240812 4.3 警告 idevSpot - IdevSpot TextAds におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4747 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240813 4.3 警告 idevSpot - IDevSpot PhpLinkExchange の user_add.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4742 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240814 7.5 危険 idevSpot - IDevSpot PhpLinkExchange における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4741 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240815 5 警告 jetbox - Jetbox CMS における重要な情報を取得される脆弱性 - CVE-2006-4740 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240816 2.6 注意 jetbox - Jetbox CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4739 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240817 7.5 危険 jetbox - Jetbox CMS の phpthumb.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4738 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240818 7.5 危険 jetbox - Jetbox CMS の index.php における SQL インジェクションの脆弱性 - CVE-2006-4737 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240819 5 警告 kellan elliott-mccrea - Kellan Elliott-McCrea MagpieRSS における重要な情報を取得される脆弱性 - CVE-2006-4735 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
240820 10 危険 マイクロソフト - Microsoft VB 6 における脆弱性 - CVE-2006-4732 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266301 7.8 HIGH
Local
readydesk readydesk ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file. NVD-CWE-Other
CVE-2016-5683 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
266302 4.3 MEDIUM
Network
accellion kiteworks_appliance Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI. CWE-22
Path Traversal
CVE-2016-5664 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
266303 6.1 MEDIUM
Network
accellion kiteworks_appliance Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (… CWE-79
Cross-site Scripting
CVE-2016-5663 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
266304 7.8 HIGH
Local
accellion kiteworks_appliance Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors. NVD-CWE-Other
CVE-2016-5662 2024-11-21 11:54 2016-08-27 Show GitHub Exploit DB Packet Storm
266305 8.8 HIGH
Network
redhat cloudforms The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters." CWE-284
Improper Access Control
CVE-2016-5383 2024-11-21 11:54 2016-08-26 Show GitHub Exploit DB Packet Storm
266306 7.5 HIGH
Network
ultravnc repeater UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP addre… CWE-284
Improper Access Control
CVE-2016-5673 2024-11-21 11:54 2016-08-26 Show GitHub Exploit DB Packet Storm
266307 9.8 CRITICAL
Network
dlink
d-link
dir-868l_firmware
dir-822_firmware
dir-880l_firmware
dir-850l_firmare
dir-895l_firmware
dir-817l\(w\)_firmware
dir-818l\(w\)_firmware
dir-890l_firmware
dir-823_firmware
dir…
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00W… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-5681 2024-11-21 11:54 2016-08-26 Show GitHub Exploit DB Packet Storm
266308 7.5 HIGH
Network
zmodo zp-ibh-13w
zp-ne-14-s
ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID valu… CWE-284
Improper Access Control
CVE-2016-5650 2024-11-21 11:54 2016-08-24 Show GitHub Exploit DB Packet Storm
266309 7.3 HIGH
Network
rockwellautomation 1766-l32bxb
1766-l32bwaa
1766-l32awaa
1766-l32bwa
1766-l32awa
1766-l32bxba
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote a… CWE-284
Improper Access Control
CVE-2016-5645 2024-11-21 11:54 2016-08-24 Show GitHub Exploit DB Packet Storm
266310 5.3 MEDIUM
Network
theforeman foreman Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via a request to A… CWE-200
Information Exposure
CVE-2016-5390 2024-11-21 11:54 2016-08-20 Show GitHub Exploit DB Packet Storm