Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241081 6.8 警告 OpenEMR - OpenEMR の library/translation.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5811 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
241082 10 危険 jonathon j. freeman - Jonathon J. Freeman OvBB における脆弱性 - CVE-2006-5809 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
241083 5 警告 マイクロソフト - Microsoft Internet Explorer 7 における安全な Web サイトからのセキュリティの証明書が無効と見なされる脆弱性 - CVE-2006-5805 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
241084 7.5 危険 mxbb - mxBB Smart Album モジュールの modules/mx_smartor/album.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5803 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
241085 5 警告 owfs - owfs および owhttpd の owserver モジュールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5801 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
241086 7.5 危険 OpenEMR - OpenEMR における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5795 2012-09-25 15:36 2006-11-8 Show GitHub Exploit DB Packet Storm
241087 4 警告 Jgaa - WarFTPd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2006-5789 2012-09-25 15:36 2006-11-7 Show GitHub Exploit DB Packet Storm
241088 7.5 危険 iprimal - IPrimal Forums の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5788 2012-09-25 15:36 2006-11-7 Show GitHub Exploit DB Packet Storm
241089 7.5 危険 iprimal - IPrimal Forums の admin/index.php におけるユーザパスワードを変更される脆弱性 - CVE-2006-5787 2012-09-25 15:36 2006-11-7 Show GitHub Exploit DB Packet Storm
241090 7.8 危険 ヒューレット・パッカード - HP OpenView CCM の radexecd.exe におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5782 2012-09-25 15:36 2006-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266091 5.4 MEDIUM
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requiring a trusted (non-admin) account. The website name … CWE-79
Cross-site Scripting
CVE-2016-9130 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266092 5.3 MEDIUM
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address was associated to one or more user accounts on a target Rev… CWE-200
Information Exposure
CVE-2016-9129 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266093 5.4 MEDIUM
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vulnerable to a reflected XSS attack. This vulnerability could be used by an attacker to stea… CWE-79
Cross-site Scripting
CVE-2016-9128 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266094 8.8 HIGH
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The password recovery form in Revive Adserver is vulnerable to CSRF attacks. This vulnerability could be exploited to send… CWE-352
 Origin Validation Error
CVE-2016-9127 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266095 5.4 MEDIUM
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in the audit trail widget of the dashboard upon login, allowing persistent XSS attacks. An … CWE-79
Cross-site Scripting
CVE-2016-9126 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266096 9.8 CRITICAL
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not invalidating the existing session upon a successful au… CWE-384
 Session Fixation
CVE-2016-9125 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266097 9.8 CRITICAL
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown … CWE-287
Improper Authentication
CVE-2016-9124 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266098 7.5 HIGH
Network
go-jose_project go-jose go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures. An integer overflow could lead to authentication bypass for CBC-HMAC encrypted ciphertexts on 32-bit architectur… CWE-190
 Integer Overflow or Wraparound
CVE-2016-9123 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266099 7.5 HIGH
Network
go-jose_project go-jose go-jose before 1.0.4 suffers from multiple signatures exploitation. The go-jose library supports messages with multiple signatures. However, when validating a signed message the API did not indicate … CWE-284
Improper Access Control
CVE-2016-9122 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm
266100 9.1 CRITICAL
Network
go-jose_project go-jose go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received pu… CWE-326
Inadequate Encryption Strength
CVE-2016-9121 2024-11-21 12:00 2017-03-28 Show GitHub Exploit DB Packet Storm