Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250341 4.3 警告 flowers - FloweRS の cas.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2309 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250342 4.3 警告 flowers - FloweRS の cas.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2308 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250343 7.5 危険 expow - Expow の autoindex.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2302 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250344 7.5 危険 arash - audioCMS arash における任意の PHP コードが実行される脆弱性 - CVE-2007-2301 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250345 7.5 危険 frogss - Frogss CMS における SQL インジェクションの脆弱性 - CVE-2007-2299 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250346 7.5 危険 GForge Group - Garennes における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2298 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250347 7.8 危険 Digium - Asterisk のSIP チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2297 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250348 7.8 危険 Digium - Asterisk の Manager Interface におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2294 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250349 7.6 危険 Digium - Asterisk の SIP チャネル T.38 SDP パーサの chan_sip.c の process_sdp 関数におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2293 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
250350 7.5 危険 cafelog - B2 Weblog および News Publishing Tool における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2290 2012-06-26 15:46 2007-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273161 6.8 MEDIUM
Network
ibm bigfix_remote_control Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request. CWE-22
Path Traversal
CVE-2016-2933 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
273162 5.3 MEDIUM
Network
ibm bigfix_remote_control IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors. CWE-91
Blind XPath Injection
CVE-2016-2932 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
273163 5.3 MEDIUM
Network
ibm bigfix_remote_control IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network. CWE-200
Information Exposure
CVE-2016-2931 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
273164 8.1 HIGH
Network
ibm bigfix_remote_control IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach. CWE-254
CWE-284
 7PK - Security Features
Improper Access Control
CVE-2016-2929 2024-11-21 11:49 2016-11-26 Show GitHub Exploit DB Packet Storm
273165 4.3 MEDIUM
Network
ibm bigfix_remote_control IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2016-2928 2024-11-21 11:49 2016-11-26 Show GitHub Exploit DB Packet Storm
273166 5.9 MEDIUM
Network
ibm bigfix_remote_control IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms … CWE-200
Information Exposure
CVE-2016-2927 2024-11-21 11:49 2016-11-26 Show GitHub Exploit DB Packet Storm
273167 5.4 MEDIUM
Network
ibm rational_team_concert
rational_rhapsody_design_manager
rational_engineering_lifecycle_manager
rational_quality_manager
rational_collaborative_lifecycle_management
rational_software_arc…
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 … CWE-79
Cross-site Scripting
CVE-2016-2926 2024-11-21 11:49 2016-11-26 Show GitHub Exploit DB Packet Storm
273168 9.1 CRITICAL
Network
ibm security_access_manager
security_access_manager_for_web
IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leve… CWE-78
OS Command 
CVE-2016-3028 2024-11-21 11:49 2016-11-25 Show GitHub Exploit DB Packet Storm
273169 8.1 HIGH
Network
ibm security_access_manager
security_access_manager_for_mobile
IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attac… CWE-254
 7PK - Security Features
CVE-2016-3025 2024-11-21 11:49 2016-11-25 Show GitHub Exploit DB Packet Storm
273170 8.5 HIGH
Network
ibm tivoli_storage_manager_for_virtual_environments IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2988 2024-11-21 11:49 2016-11-25 Show GitHub Exploit DB Packet Storm