Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242211 6.8 警告 abledating - ABK-Soft AbleDating の search_results.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6572 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
242212 4.3 警告 gallarific - Gallarific Free Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6567 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
242213 10 危険 8pussy - Octopussy における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2008-6566 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
242214 9.3 危険 Cerulean Studios - Trillian の XML 解析におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6563 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
242215 10 危険 Aztech Group Ltd - Aztech ADSL2/2+ 4-port ルータの cgi-bin/script における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2008-6554 2012-06-26 16:10 2009-03-30 Show GitHub Exploit DB Packet Storm
242216 5.1 警告 e-vision - e-Vision CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6551 2012-06-26 16:10 2009-03-30 Show GitHub Exploit DB Packet Storm
242217 4.3 警告 davidbourrier - Glossaire の glossaire.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6550 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
242218 7.5 危険 formencode - python-formencode の schema.py におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6547 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
242219 10 危険 alecwh - phpns における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2008-6546 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
242220 7.5 危険 comscripts - Web Server Creator Web Portal の news/include/createdb.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6545 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267461 9.8 CRITICAL
Network 		jenkins
redhat 		jenkins
openshift 		The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0788 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm
267462 9.8 CRITICAL
Network 		samsung
fedoraproject 		x14j_firmware
fedora 		Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denia… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-0729 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm
267463 6.1 MEDIUM
Network 		apache activemq The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via … CWE-254
 7PK - Security Features 		CVE-2016-0734 2024-11-21 11:42 2016-04-8 Show GitHub Exploit DB Packet Storm
267464 8.8 HIGH
Network 		emc documentum_d2 EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors. NVD-CWE-noinfo
CVE-2016-0888 2024-11-21 11:42 2016-04-7 Show GitHub Exploit DB Packet Storm
267465 7.5 HIGH
Network 		eaton_lighting_systems eg2_web_control Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request. CWE-200
Information Exposure 		CVE-2016-0871 2024-11-21 11:42 2016-04-7 Show GitHub Exploit DB Packet Storm
267466 7.5 HIGH
Network 		redhat jboss_wildfly_application_server Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensit… CWE-200
Information Exposure 		CVE-2016-0793 2024-11-21 11:42 2016-04-2 Show GitHub Exploit DB Packet Storm
267467 8.1 HIGH
Network 		redhat
oracle 		enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
icedtea7
jdk
jre 		Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-componen… NVD-CWE-noinfo
CVE-2016-0636 2024-11-21 11:42 2016-03-25 Show GitHub Exploit DB Packet Storm
267468 5.9 MEDIUM
Network 		samba samba The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-0771 2024-11-21 11:42 2016-03-14 Show GitHub Exploit DB Packet Storm
267469 6.1 MEDIUM
Physics 		google android Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified… CWE-264
CWE-254
Permissions, Privileges, and Access Controls
 7PK - Security Features 		CVE-2016-0832 2024-11-21 11:42 2016-03-13 Show GitHub Exploit DB Packet Storm
267470 5.5 MEDIUM
Local 		google android The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE pe… CWE-200
Information Exposure 		CVE-2016-0831 2024-11-21 11:42 2016-03-13 Show GitHub Exploit DB Packet Storm