Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227721 7.5 危険 Zen Cart - Zen Cart におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4218 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227722 7.5 危険 webinsta - WEBInsta CMS の modules/usersonline/users.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4217 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227723 5.1 警告 Zen Cart - Zen Cart の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4215 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227724 7.5 危険 Zen Cart - Zen Cart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-4214 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227725 7.5 危険 webinsta - WEBInsta Mailing List Manager の install3.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4209 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227726 5 警告 skippy.net - WordPress 用の Skippy WP-DB-Backup プラグインにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-4208 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227727 7.5 危険 webdynamite - WebDynamite ProjectButler における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4205 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227728 7.5 危険 phprojekt - PHProjekt における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4204 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227729 7.5 危険 spidey blog - Spidey Blog Script の proje_goster.php における SQL インジェクションの脆弱性 - CVE-2006-4202 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
227730 5.1 警告 wheatblog - wB の includes/session.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4198 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211611 9.8 CRITICAL
Network
qualcomm mdm9625_firmware
sd_410_firmware
sd_412_firmware
sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_615_firmware
sd_616_firmware
sd_415_firmware
sd_617_firmware
sd_625_f…
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 6… CWE-20
 Improper Input Validation 
CVE-2015-9115 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
211612 9.8 CRITICAL
Network
qualcomm mdm9625_firmware
sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_625_firmware
sd_650_firmware
sd_652_firmware
sd_810_firmware
sd_820_firmware
sd_820a_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, u… CWE-476
 NULL Pointer Dereference
CVE-2015-9113 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
211613 9.8 CRITICAL
Network
qualcomm mdm9625_firmware
sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_625_firmware
sd_650_firmware
sd_652_firmware
sd_820a_firmware
sd_820_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, no addres… CWE-20
 Improper Input Validation 
CVE-2015-9108 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
211614 7.0 HIGH
Local
google android In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead… CWE-264
CWE-362
Permissions, Privileges, and Access Controls
Race Condition
CVE-2015-9016 2024-11-21 11:39 2018-04-6 Show GitHub Exploit DB Packet Storm
211615 7.8 HIGH
Local
google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-9015 2024-11-21 11:39 2018-04-5 Show GitHub Exploit DB Packet Storm
211616 9.8 CRITICAL
Network
google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-9014 2024-11-21 11:39 2018-04-5 Show GitHub Exploit DB Packet Storm
211617 9.8 CRITICAL
Network
google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-9013 2024-11-21 11:39 2018-04-5 Show GitHub Exploit DB Packet Storm
211618 9.8 CRITICAL
Network
google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-9012 2024-11-21 11:39 2018-04-5 Show GitHub Exploit DB Packet Storm
211619 9.8 CRITICAL
Network
google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-9011 2024-11-21 11:39 2018-04-5 Show GitHub Exploit DB Packet Storm
211620 9.8 CRITICAL
Network
google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-9010 2024-11-21 11:39 2018-04-5 Show GitHub Exploit DB Packet Storm