Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227481 7.5 危険 sh-news - SH-News における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5282 2012-12-20 18:02 2006-10-13 Show GitHub Exploit DB Packet Storm
227482 7.5 危険 phpmyagenda - phpMyAgenda の templates/header.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5263 2012-12-20 18:02 2006-10-12 Show GitHub Exploit DB Packet Storm
227483 7.5 危険 phpmynews - PHPMyNews における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5261 2012-12-20 18:02 2006-10-12 Show GitHub Exploit DB Packet Storm
227484 5.1 警告 webmedia explorer - Webmedia Explorer の includes/core.lib.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5252 2012-12-20 18:02 2006-10-12 Show GitHub Exploit DB Packet Storm
227485 7.5 危険 tagit - tagit2b の tagmin/delTagUser.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5249 2012-12-20 18:02 2006-10-11 Show GitHub Exploit DB Packet Storm
227486 7.8 危険 Polycom - Polycom SoundPoint IP 301 VoIP Desktop Phone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5233 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
227487 7.5 危険 rob hensley - Rob Hensley ackerTodo の Google Gadget login.php における SQL インジェクションの脆弱性 - CVE-2006-5228 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
227488 6.8 警告 TorrentFlux - TorrentFlux の admin.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5227 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
227489 7.5 危険 sergey lyubka - Sergey Lyubka Simple HTTPD におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5216 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
227490 5 警告 トレンドマイクロ - SMB および OSCE 用の CSM Suite におけるファイルを削除される脆弱性 - CVE-2006-5212 2012-12-20 18:02 2006-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211801 7.5 HIGH
Network
canonical
libarchive
novell
ubuntu_linux
libarchive
suse_linux_enterprise_server
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-8919 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
211802 7.5 HIGH
Network
novell
libarchive
suse_linux_enterprise_server
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
libarchive
The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy." CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-8918 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
211803 7.5 HIGH
Network
debian
libarchive
canonical
debian_linux
libarchive
ubuntu_linux
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file. CWE-476
 NULL Pointer Dereference
CVE-2015-8917 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
211804 6.5 MEDIUM
Network
canonical
debian
libarchive
ubuntu_linux
debian_linux
libarchive
bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NU… CWE-476
 NULL Pointer Dereference
CVE-2015-8916 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
211805 5.5 MEDIUM
Local
libarchive libarchive bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file. CWE-125
Out-of-bounds Read
CVE-2015-8915 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
211806 7.5 HIGH
Network
opensuse
canonical
gnu
leap
opensuse
ubuntu_linux
libidn
idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read. CWE-125
Out-of-bounds Read
CVE-2015-8948 2024-11-21 11:39 2016-09-8 Show GitHub Exploit DB Packet Storm
211807 9.8 CRITICAL
Network
debian
dbd-mysql_project
debian_linux
dbd-mysql
Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure of my_login. CWE-416
 Use After Free
CVE-2015-8949 2024-11-21 11:39 2016-08-20 Show GitHub Exploit DB Packet Storm
211808 6.1 MEDIUM
Network
php php The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows r… CWE-79
Cross-site Scripting
CVE-2015-8935 2024-11-21 11:39 2016-08-7 Show GitHub Exploit DB Packet Storm
211809 5.5 MEDIUM
Local
linux
google
linux_kernel
android
The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which … CWE-200
Information Exposure
CVE-2015-8944 2024-11-21 11:39 2016-08-6 Show GitHub Exploit DB Packet Storm
211810 7.8 HIGH
Local
google android drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, whic… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-8943 2024-11-21 11:39 2016-08-6 Show GitHub Exploit DB Packet Storm