Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242051 5.1 警告 PHP Outburst - PHP Outburst Easynews の admin.php における認証を回避される脆弱性 - CVE-2006-5412 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
242052 7.5 危険 justin white - FreeWPS 用の upload.php における任意の PHP プログラムをアップロードされる脆弱性 - CVE-2006-5411 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
242053 7.5 危険 mobilesecure inc - Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおける SQL インジェクションの脆弱性 - CVE-2006-5409 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
242054 5.1 警告 mobilesecure inc - Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5408 2012-09-25 15:36 2006-10-20 Show GitHub Exploit DB Packet Storm
242055 7.5 危険 osTicket - osTicket の open_form.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5407 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
242056 3.6 注意 passgo - Passgo Defender における重要なファイルを変更される脆弱性 - CVE-2006-5406 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
242057 7.5 危険 マイクロソフト - Microsoft Class Package Export Tool におけるバッファオーバーフローの脆弱性 - CVE-2006-5395 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
242058 7.5 危険 opendoc - OpenDock FullCore における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5392 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
242059 7.5 危険 nuralstorm - NuralStorm Webmail の process.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5386 2012-09-25 15:36 2006-10-18 Show GitHub Exploit DB Packet Storm
242060 9 危険 オラクル - JD Edwards EnterpriseOne の JD Edwards HTML Server における脆弱性 - CVE-2006-5378 2012-09-25 15:36 2006-10-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266791 5.3 MEDIUM
Network 		bluez bluez In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidu… CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2016-9797 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
266792 7.8 HIGH
Local 		bmc patrol In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9638 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
266793 9.8 CRITICAL
Network 		alcatel-lucent omnivista_8770_network_management_system Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista i… CWE-287
CWE-264
Improper Authentication
Permissions, Privileges, and Access Controls 		CVE-2016-9796 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
266794 7.5 HIGH
Network 		b2evolution b2evolution The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request. CWE-255
Credentials Management 		CVE-2016-9479 2024-11-21 12:01 2016-12-3 Show GitHub Exploit DB Packet Storm
266795 8.6 HIGH
Network 		s9y serendipity In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2016-9752 2024-11-21 12:01 2016-12-1 Show GitHub Exploit DB Packet Storm
266796 6.1 MEDIUM
Network 		piwigo piwigo Cross-site scripting (XSS) vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2016-9751 2024-11-21 12:01 2016-12-1 Show GitHub Exploit DB Packet Storm
266797 7.5 HIGH
Network 		boa boa Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters. CWE-20
 Improper Input Validation  		CVE-2016-9564 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
266798 9.8 CRITICAL
Network 		exponentcms exponent_cms In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is defined in the expCommentControllercontr… CWE-89
SQL Injection 		CVE-2016-9481 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
266799 9.1 CRITICAL
Network 		libdwarf_project libdwarf libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9480 2024-11-21 12:01 2016-11-30 Show GitHub Exploit DB Packet Storm
266800 7.8 HIGH
Local 		linux linux_kernel The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9644 2024-11-21 12:01 2016-11-28 Show GitHub Exploit DB Packet Storm