Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227451	7.5	危険	supermod	-	YaBBSM 用の SuperMod における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5413	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

227452	6.2	警告	東芝	-	複数製品に使用される Toshiba Bluetooth ワイアレスデバイスドライバにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5405	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227453	2.6	注意	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおける重要な情報を取得される脆弱性	-	CVE-2006-5404	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

227454	5.1	警告	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-5403	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

227455	7.5	危険	phpmybibli	-	PHPmybibli における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5402	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227456	7.5	危険	phprecipebook	-	PHPRecipeBook の classes/Import_MM.class.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5399	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227457	7.5	危険	simplog	-	Simplog の comments.php における SQL インジェクションの脆弱性	-	CVE-2006-5398	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227458	2.1	注意	X.Org Foundation	-	X.Org libX11 の Xinput モジュールにおける XCOMPOSEFILE 環境変数によって使用されるファイルが読み込まれる脆弱性	-	CVE-2006-5397	2012-12-20 18:02	2006-11-2	Show	GitHub Exploit DB Packet Storm

227459	5	警告	xfire	-	Xfire におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5391	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227460	6.8	警告	phpBB	-	phpBB 用の MMW モジュールにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5390	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212011	7.8	HIGH Local	huawei	p7_firmware	Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8304	2024-11-21 11:38	2016-04-13	Show	GitHub Exploit DB Packet Storm

212012	8.6	HIGH Network	debian inspircd	debian_linux inspircd	The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\0…	CWE-20 Improper Input Validation	CVE-2015-8702	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212013	5.3	MEDIUM Network	debian redmine	debian_linux redmine	app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed.	CWE-200 Information Exposure	CVE-2015-8537	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212014	7.4	HIGH Network	debian redmine	debian_linux redmine	Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to …	NVD-CWE-Other	CVE-2015-8474	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212015	4.3	MEDIUM Network	debian redmine	debian_linux redmine	The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changeset messages by leveraging permission to …	CWE-200 Information Exposure	CVE-2015-8473	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212016	5.3	MEDIUM Network	redmine debian	redmine debian_linux	app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the ti…	CWE-199 Information Management Errors	CVE-2015-8346	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212017	5.3	MEDIUM Network	lenovo	emc_firmware	The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.…	CWE-254 7PK - Security Features	CVE-2015-8108	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212018	7.3	HIGH Network	claws-mail opensuse	claws-mail leap opensuse	Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecifie…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8614	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212019	8.8	HIGH Network	cacti	cacti	SQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cg_g parameter in…	CWE-89 SQL Injection	CVE-2015-8604	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm

212020	4.3	MEDIUM Network	atlassian	confluence	Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdeco…	CWE-200 Information Exposure	CVE-2015-8399	2024-11-21 11:38	2016-04-12	Show	GitHub Exploit DB Packet Storm