Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227451	7.5	危険	supermod	-	YaBBSM 用の SuperMod における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5413	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

227452	6.2	警告	東芝	-	複数製品に使用される Toshiba Bluetooth ワイアレスデバイスドライバにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5405	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227453	2.6	注意	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおける重要な情報を取得される脆弱性	-	CVE-2006-5404	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

227454	5.1	警告	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-5403	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

227455	7.5	危険	phpmybibli	-	PHPmybibli における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5402	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227456	7.5	危険	phprecipebook	-	PHPRecipeBook の classes/Import_MM.class.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5399	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227457	7.5	危険	simplog	-	Simplog の comments.php における SQL インジェクションの脆弱性	-	CVE-2006-5398	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227458	2.1	注意	X.Org Foundation	-	X.Org libX11 の Xinput モジュールにおける XCOMPOSEFILE 環境変数によって使用されるファイルが読み込まれる脆弱性	-	CVE-2006-5397	2012-12-20 18:02	2006-11-2	Show	GitHub Exploit DB Packet Storm

227459	5	警告	xfire	-	Xfire におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5391	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

227460	6.8	警告	phpBB	-	phpBB 用の MMW モジュールにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5390	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212171	4.6	MEDIUM Physics	mozilla	firefox_os	The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by enterin…	CWE-284 Improper Access Control	CVE-2015-8512	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212172	6.4	MEDIUM Physics	mozilla	firefox_os	Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors.	CWE-362 Race Condition	CVE-2015-8511	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212173	6.1	MEDIUM Network	mozilla	firefox_os	Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary w…	CWE-79 Cross-site Scripting	CVE-2015-8510	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212174	6.1	MEDIUM Network	getsymphony	symphony	Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter …	CWE-79 Cross-site Scripting	CVE-2015-8376	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212175	9.0	CRITICAL Network	canonical pygments	ubuntu_linux pygments	The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.	CWE-78 OS Command	CVE-2015-8557	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212176	9.8	CRITICAL Network	libtiff oracle redhat	libtiff vm_server linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux	Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service …	CWE-787 Out-of-bounds Write	CVE-2015-8668	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212177	5.0	MEDIUM Network	xen	xen	The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to …	CWE-254 7PK - Security Features	CVE-2015-8615	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212178	8.4	HIGH Local	blueman_project	blueman	The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8612	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212179	7.4	HIGH Network	bluecoat	proxysg advanced_secure_gateway	Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phi…	NVD-CWE-Other	CVE-2015-8597	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm

212180	7.5	HIGH Network	quassel-irc opensuse	quassel leap opensuse	The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a quer…	CWE-17 Code	CVE-2015-8547	2024-11-21 11:38	2016-01-9	Show	GitHub Exploit DB Packet Storm