Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242061	4.3	警告	luke hutteman	-	Luke Hutteman SharpReader におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4761	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242062	5	警告	laurentiu matei	-	Laurentiu Matei XHP CMS におけるインストールパスを取得される脆弱性	-	CVE-2006-4752	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242063	6.8	警告	laurentiu matei	-	Laurentiu Matei XHP CMS の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4751	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242064	5.1	警告	openi-cms group	-	OPENi-CMS の openi-admin/base/fileloader.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4750	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242065	4.3	警告	idevSpot	-	IdevSpot TextAds におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4747	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242066	4.3	警告	idevSpot	-	IDevSpot PhpLinkExchange の user_add.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4742	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242067	7.5	危険	idevSpot	-	IDevSpot PhpLinkExchange における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4741	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242068	5	警告	jetbox	-	Jetbox CMS における重要な情報を取得される脆弱性	-	CVE-2006-4740	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242069	2.6	注意	jetbox	-	Jetbox CMS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4739	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

242070	7.5	危険	jetbox	-	Jetbox CMS の phpthumb.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4738	2012-09-25 15:35	2006-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265801	7.5	HIGH Network	spice_project redhat debian	spice enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux enterprise_linux_server_aus enterprise_linux_server_eus	A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to …	CWE-20 Improper Input Validation	CVE-2016-9578	2024-11-21 12:01	2018-07-28	Show	GitHub Exploit DB Packet Storm

265802	8.8	HIGH Network	spice_project redhat debian	spice enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux enterprise_linux_server_aus enterprise_linux_server_eus	A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-9577	2024-11-21 12:01	2018-07-28	Show	GitHub Exploit DB Packet Storm

265803	5.5	MEDIUM Local	theforeman redhat	katello satellite satellite_capsule	A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them…	CWE-59 Link Following	CVE-2016-9595	2024-11-21 12:01	2018-07-28	Show	GitHub Exploit DB Packet Storm

265804	5.9	MEDIUM Network	mozilla	network_security_services	nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.	CWE-384 Session Fixation	CVE-2016-9574	2024-11-21 12:01	2018-07-19	Show	GitHub Exploit DB Packet Storm

265805	6.1	MEDIUM Network	accellion	ftp_server	Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable …	CWE-79 Cross-site Scripting	CVE-2016-9500	2024-11-21 12:01	2018-07-14	Show	GitHub Exploit DB Packet Storm

265806	5.3	MEDIUM Network	accellion	ftp_server	Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts a…	CWE-200 Information Exposure	CVE-2016-9499	2024-11-21 12:01	2018-07-14	Show	GitHub Exploit DB Packet Storm

265807	8.8	HIGH Adjacent	hughes	hn7740s_firmware dw7000_firmware hn7000s_firmware hn7000sm_firmware	Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible…	CWE-287 Improper Authentication	CVE-2016-9497	2024-11-21 12:01	2018-07-14	Show	GitHub Exploit DB Packet Storm

265808	6.5	MEDIUM Adjacent	hughes	hn7740s_firmware dw7000_firmware hn7000s_firmware hn7000sm_firmware	Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or htt…	CWE-306 Missing Authentication for Critical Function	CVE-2016-9496	2024-11-21 12:01	2018-07-14	Show	GitHub Exploit DB Packet Storm

265809	8.8	HIGH Adjacent	hughes	hn7740s_firmware dw7000_firmware hn7000s_firmware hn7000sm_firmware	Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's default telnet port (23) can be obtained through using one of…	CWE-798 Use of Hard-coded Credentials	CVE-2016-9495	2024-11-21 12:01	2018-07-14	Show	GitHub Exploit DB Packet Storm

265810	6.5	MEDIUM Adjacent	hughes	hn7740s_firmware dw7000_firmware hn7000s_firmware hn7000sm_firmware	Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to …	CWE-20 Improper Input Validation	CVE-2016-9494	2024-11-21 12:01	2018-07-14	Show	GitHub Exploit DB Packet Storm