Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227501	6.8	警告	wheatblog	-	Wheatblog におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5195	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227502	7.5	危険	wikyblog	-	Josh Schmidt WikyBlog の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5193	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227503	7.5	危険	phpgreetz	-	phpGreetz の includes/footer.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5192	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227504	5.1	警告	phpBB	-	phpBB 用の Nivisec Static Topics モジュールにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5191	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227505	5	警告	webgeneius	-	webGENEius GOOP Gallery の download.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-5188	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227506	5.1	警告	phpmyprofiler	-	phpMyProfiler の functions.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5186	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227507	7.5	危険	pkr internet	-	PKR Internet Taskjitsu における SQL インジェクションの脆弱性	-	CVE-2006-5184	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

227508	5.1	警告	powerportal	-	John Himmelman PowerPortal におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5169	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227509	4.3	警告	Pebble	-	Simon Brown Pebble の検索機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-5168	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

227510	5.1	警告	skrypty	-	Skrypty PPA Gallery の inc/functions.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5165	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211861	3.3	LOW Local	opensuse	opensuse	tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8842	2024-11-21 11:39	2016-04-21	Show	GitHub Exploit DB Packet Storm

211862	9.8	CRITICAL Network	suse opensuse canonical debian gnu fedoraproject	linux_enterprise_server linux_enterprise_desktop linux_enterprise_debuginfo linux_enterprise_software_development_kit opensuse suse_linux_enterprise_server ubuntu_linux debian_li…	Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possib…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8779	2024-11-21 11:39	2016-04-20	Show	GitHub Exploit DB Packet Storm

211863	9.8	CRITICAL Network	fedoraproject debian canonical gnu suse opensuse	fedora debian_linux ubuntu_linux glibc linux_enterprise_server linux_enterprise_desktop linux_enterprise_debuginfo linux_enterprise_software_development_kit opensuse suse_l…	Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the s…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8778	2024-11-21 11:39	2016-04-20	Show	GitHub Exploit DB Packet Storm

211864	9.1	CRITICAL Network	suse opensuse canonical debian fedoraproject gnu	linux_enterprise_server linux_enterprise_desktop linux_enterprise_debuginfo linux_enterprise_software_development_kit opensuse suse_linux_enterprise_server ubuntu_linux debian_li…	The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive informatio…	CWE-189 Numeric Errors	CVE-2015-8776	2024-11-21 11:39	2016-04-20	Show	GitHub Exploit DB Packet Storm

211865	7.5	HIGH Network	xmlsoft canonical debian	libxml2 ubuntu_linux debian_linux	dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring…	NVD-CWE-noinfo	CVE-2015-8806	2024-11-21 11:39	2016-04-14	Show	GitHub Exploit DB Packet Storm

211866	6.5	MEDIUM Network	libtiff debian	libtiff debian_linux	The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.	CWE-787 Out-of-bounds Write	CVE-2015-8784	2024-11-21 11:39	2016-04-14	Show	GitHub Exploit DB Packet Storm

211867	6.1	MEDIUM Network	fedoraproject horde debian	fedora groupware debian_linux	Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Web…	CWE-79 Cross-site Scripting	CVE-2015-8807	2024-11-21 11:39	2016-04-14	Show	GitHub Exploit DB Packet Storm

211868	7.4	HIGH Local	foxitsoftware	foxit_reader	The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8843	2024-11-21 11:39	2016-04-14	Show	GitHub Exploit DB Packet Storm

211869	9.8	CRITICAL Network	eset	nod32	Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation fi…	CWE-787 Out-of-bounds Write	CVE-2015-8841	2024-11-21 11:39	2016-04-12	Show	GitHub Exploit DB Packet Storm

211870	9.8	CRITICAL Network	cypherpunks	pidgin-otr	Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbit…	NVD-CWE-Other	CVE-2015-8833	2024-11-21 11:39	2016-04-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed