Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227431	7.5	危険	trawler	-	Trawler Web CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5495	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

227432	7.5	危険	PHPNUKE	-	PHP-Nuke 用の pandaBB モジュールにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5494	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

227433	5	警告	BlackBerry	-	IBM Lotus Domino 用の RIM BlackBerry Enterprise Server におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5489	2012-12-20 18:02	2006-10-6	Show	GitHub Exploit DB Packet Storm

227434	7.5	危険	xchangeboard	-	XchangeBoard における SQL インジェクションの脆弱性	-	CVE-2006-5488	2012-12-20 18:02	2006-10-25	Show	GitHub Exploit DB Packet Storm

227435	4.3	警告	サン・マイクロシステムズ	-	Sun Java System Messaging Server および iPlanet Messaging Server の Webmail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-5486	2012-12-20 18:02	2006-10-24	Show	GitHub Exploit DB Packet Storm

227436	7.5	危険	speedberg	-	SpeedBerg における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5485	2012-12-20 18:02	2006-10-24	Show	GitHub Exploit DB Packet Storm

227437	5	警告	SSH コミュニケーションズ・セキュリティ	-	SSH Tectia Client/Server/Connector などの製品における RSA 鍵で署名済みの PKCS #1 署名を偽装される脆弱性	-	CVE-2006-5484	2012-12-20 18:02	2006-10-24	Show	GitHub Exploit DB Packet Storm

227438	7.5	危険	softerra	-	Softerra PHP Developer Library における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5472	2012-12-20 18:02	2006-10-24	Show	GitHub Exploit DB Packet Storm

227439	7.5	危険	softerra	-	Softerra PHP Developer Library の example/lib/grid3.lib.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5471	2012-12-20 18:02	2006-10-24	Show	GitHub Exploit DB Packet Storm

227440	5.4	警告	RPM Canonical	-	RPM Package Manager の librpm におけるヒープベースのバッファオーバーフローの脆弱性	-	CVE-2006-5466	2012-12-20 18:02	2006-11-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212171	4.6	MEDIUM Physics	mozilla	firefox_os	The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by enterin…	CWE-284 Improper Access Control	CVE-2015-8512	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212172	6.4	MEDIUM Physics	mozilla	firefox_os	Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors.	CWE-362 Race Condition	CVE-2015-8511	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212173	6.1	MEDIUM Network	mozilla	firefox_os	Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary w…	CWE-79 Cross-site Scripting	CVE-2015-8510	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212174	6.1	MEDIUM Network	getsymphony	symphony	Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter …	CWE-79 Cross-site Scripting	CVE-2015-8376	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212175	9.0	CRITICAL Network	canonical pygments	ubuntu_linux pygments	The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.	CWE-78 OS Command	CVE-2015-8557	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212176	9.8	CRITICAL Network	libtiff oracle redhat	libtiff vm_server linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux	Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service …	CWE-787 Out-of-bounds Write	CVE-2015-8668	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212177	5.0	MEDIUM Network	xen	xen	The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to …	CWE-254 7PK - Security Features	CVE-2015-8615	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212178	8.4	HIGH Local	blueman_project	blueman	The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8612	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212179	7.4	HIGH Network	bluecoat	proxysg advanced_secure_gateway	Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phi…	NVD-CWE-Other	CVE-2015-8597	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212180	7.5	HIGH Network	quassel-irc opensuse	quassel leap opensuse	The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a quer…	CWE-17 Code	CVE-2015-8547	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm