Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227421 7.5 危険 web group communication center - WGCC の quiz.php における SQL インジェクションの脆弱性 - CVE-2006-5514 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
227422 4.3 警告 zwahlen informatik - Zwahlen Online Shop の article.htm におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5512 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227423 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における任意の PHP コードを実行される脆弱性 - CVE-2006-5509 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227424 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における SQL インジェクションの脆弱性 - CVE-2006-5508 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227425 7.5 危険 wiclear - WiClear における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5506 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227426 4.3 警告 Simple Machines - SMF の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5504 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227427 4.3 警告 Simple Machines - SMF の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5503 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227428 5.1 警告 xchangeboard - XchangeBoard の inc/DBInterface.php における SQL インジェクションの脆弱性 - CVE-2006-5500 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227429 6.8 警告 s9y - s9y におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5499 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
227430 4.3 警告 timothy claason - Timothy Claason KnowledgeBank におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5496 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212171 4.6 MEDIUM
Physics
mozilla firefox_os The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by enterin… CWE-284
Improper Access Control
CVE-2015-8512 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212172 6.4 MEDIUM
Physics
mozilla firefox_os Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors. CWE-362
Race Condition
CVE-2015-8511 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212173 6.1 MEDIUM
Network
mozilla firefox_os Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary w… CWE-79
Cross-site Scripting
CVE-2015-8510 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212174 6.1 MEDIUM
Network
getsymphony symphony Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter … CWE-79
Cross-site Scripting
CVE-2015-8376 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212175 9.0 CRITICAL
Network
canonical
pygments
ubuntu_linux
pygments
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name. CWE-78
OS Command 
CVE-2015-8557 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212176 9.8 CRITICAL
Network
libtiff
oracle
redhat
libtiff
vm_server
linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service … CWE-787
 Out-of-bounds Write
CVE-2015-8668 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212177 5.0 MEDIUM
Network
xen xen The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to … CWE-254
 7PK - Security Features
CVE-2015-8615 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212178 8.4 HIGH
Local
blueman_project blueman The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-8612 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212179 7.4 HIGH
Network
bluecoat proxysg
advanced_secure_gateway
Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phi… NVD-CWE-Other
CVE-2015-8597 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
212180 7.5 HIGH
Network
quassel-irc
opensuse
quassel
leap
opensuse
The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a quer… CWE-17
Code
CVE-2015-8547 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm