Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227911 6.8 警告 Joomla! - Joomla! 用の com_performs における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3774 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227912 6.8 警告 Mambo Foundation - Joomla! および Mambo 用の Bridge コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3773 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
227913 5.1 警告 php-post - PHP-Post における管理者権限を取得される脆弱性 - CVE-2006-3772 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227914 7.5 危険 imaginex-resource - iManage CMS の component.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3771 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227915 7.5 危険 phpfaber - phpFaber TopSites の index.php における SQL インジェクションの脆弱性 - CVE-2006-3770 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227916 2.6 注意 top xl - Top XL におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3769 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227917 6.4 警告 intervations - FileCOPA FTP Server の filecpnt.exe における整数アンダーフローの脆弱性 - CVE-2006-3768 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
227918 6.8 警告 darrens 5-dollar script archive - Darren's $5 Script Archive osDate の showprofile.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3767 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227919 5 警告 darrens 5-dollar script archive - Darren's $5 Script Archive osDate における本人のレートを格上げできる脆弱性 - CVE-2006-3766 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227920 4.3 警告 huttenlocher webdesign - Huttenlocher Webdesign hwdeGUEST におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3765 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212111 9.8 CRITICAL
Network
google android The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors,… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6642 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
212112 3.1 LOW
Adjacent
google android Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427. CWE-200
Information Exposure
CVE-2015-6641 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
212113 7.8 HIGH
Local
google android The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows at… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6640 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
212114 7.8 HIGH
Local
google android The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka i… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6639 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
212115 7.8 HIGH
Local
google android The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 24673908. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6638 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
212116 7.8 HIGH
Local
google android The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6637 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
212117 9.8 CRITICAL
Network
google android mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-6636 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
212118 7.5 HIGH
Network
eucalyptus eucalyptus HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's … CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6861 2024-11-21 11:35 2016-01-5 Show GitHub Exploit DB Packet Storm
212119 8.4 HIGH
Local
hp network_switch_software
j8692a
j8693a
j8697a
j8698a
j8699a
j8700a
j8715a
j8715b
j8992a
j9091a
j9263a
j9264a
j9265a
j9310a
j9311a
j9447a
j9448a
j9…
HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6860 2024-11-21 11:35 2016-01-5 Show GitHub Exploit DB Packet Storm
212120 7.8 HIGH
Local
hp network_switch_software HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6859 2024-11-21 11:35 2016-01-5 Show GitHub Exploit DB Packet Storm