Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242301 6.8 警告 mtcms - MTCMS の admin/admin_settings.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6796 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242302 7.5 危険 myphpnuke - MPN の gallery/displayCategory.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6795 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242303 7.5 危険 okul merkezi - Okul Merkezi Portal の ataturk.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6793 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242304 7.5 危険 mxmania - Calendar MX BASIC の calendar_detail.asp における SQL インジェクションの脆弱性 - CVE-2006-6792 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242305 7.5 危険 luckybot - LuckyBot における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6788 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242306 7.5 危険 mxmania - Newsletter MX の admin/admin_mail_adressee.asp における SQL インジェクションの脆弱性 - CVE-2006-6787 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242307 6.5 警告 open newsletter - Open Newsletter における任意の PHP コードを実行される脆弱性 - CVE-2006-6786 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242308 7.5 危険 open newsletter - Open Newsletter の settings.php などのスクリプトにおける不正な管理者の操作を実行される脆弱性 - CVE-2006-6785 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242309 7.5 危険 netbula - Netbula Anyboard における SQL インジェクションの脆弱性 - CVE-2006-6784 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
242310 7.5 危険 logahead - logahead UNU における任意のファイルをアップロードされる脆弱性 CWE-287
不適切な認証 		CVE-2006-6783 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269511 8.1 HIGH
Network 		infinixauthority
bluproducts
xolo
beeline
iku-mobile
leagoo
doogee 		hot_x507_firmware
hot_2_x510_firmware
zero_x506_firmware
zero_2_x509_firmware
studio_g_firmware
studio_g_plus_firmware
studio_6.0_hd_firmware
studio_x_firmware
studio_x_plus_f… 		Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this bina… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6564 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
269512 9.8 CRITICAL
Network 		dlink dir-823_firmware
dir-822_firmware
dir-818l\(w\)_firmware
dir-895l_firmware
dir-890l_firmware
dir-885l_firmware
dir-880l_firmware
dir-868l_firmware
dir-850l_firmware 		Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6563 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
269513 9.8 CRITICAL
Network 		freebsd freebsd Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory. The full impact and severity depend… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6559 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
269514 9.8 CRITICAL
Network 		asus rp-ac52_firmware
ea-n66_firmware
rp-n12_firmware
rp-n14_firmware
rp-n53_firmware
rp-ac56_firmware
wmp-n12_firmware 		A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the action_script parameter. The … CWE-77
Command Injection 		CVE-2016-6558 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
269515 8.8 HIGH
Network 		asus rp-ac52_firmware
ea-n66_firmware
rp-n12_firmware
rp-n14_firmware
rp-n53_firmware
rp-ac56_firmware
wmp-n12_firmware 		In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided… CWE-352
 Origin Validation Error 		CVE-2016-6557 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
269516 8.8 HIGH
Adjacent 		thetrackr trackr_bravo_firmware TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Andro… CWE-287
Improper Authentication 		CVE-2016-6541 2024-11-21 11:56 2018-07-7 Show GitHub Exploit DB Packet Storm
269517 6.5 MEDIUM
Adjacent 		thetrackr trackr_bravo_firmware Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which can be discovered a… CWE-200
Information Exposure 		CVE-2016-6540 2024-11-21 11:56 2018-07-7 Show GitHub Exploit DB Packet Storm
269518 8.8 HIGH
Adjacent 		thetrackr trackr_bravo_firmware The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been r… CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-6538 2024-11-21 11:56 2018-07-7 Show GitHub Exploit DB Packet Storm
269519 3.5 LOW
Adjacent 		thetrackr trackr_firmware The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by being in close proximity to the Bluetoot… CWE-200
Information Exposure 		CVE-2016-6539 2024-11-21 11:56 2018-07-7 Show GitHub Exploit DB Packet Storm
269520 9.6 CRITICAL
Network 		cloudfoundry
pivotal_software 		cf-release
cloud_foundry_elastic_runtime 		Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpack. Although it is not recommended, a user can specify a cr… CWE-200
Information Exposure 		CVE-2016-6658 2024-11-21 11:56 2018-03-30 Show GitHub Exploit DB Packet Storm