Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240221 7.5 危険 mamboxchange - Mambo 用の reporter コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6051 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240222 7.5 危険 phil taylor - Mambo 用の shambo2 コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6049 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240223 6.8 警告 Oliver - Oliver の loginform-inc.php における任意の PHP コードを実行される脆弱性 - CVE-2006-6043 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240224 7.5 危険 laurent van den reysen - Laurent Van den Reysen WORK system e-commerce における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-6041 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240225 6.8 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin の admincp/index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6040 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240226 6.8 警告 leinir - Dan Jensen Travelsized CMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6037 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240227 7.2 危険 NetBSD - NetBSD カーネルにおける脆弱性 - CVE-2006-6014 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240228 4.3 警告 mginternet - MGinternet CSM の csm/asp/listings.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6012 2012-09-25 15:36 2006-11-21 Show GitHub Exploit DB Packet Storm
240229 6.5 警告 Netkit - Linux Netkit の ftpd における権限を取得される脆弱性 - CVE-2006-6008 2012-09-25 15:36 2006-11-10 Show GitHub Exploit DB Packet Storm
240230 5 警告 マイクロソフト - Active Directory が稼動している Windows 2000 Advanced Server SP4 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5988 2012-09-25 15:36 2006-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267281 7.8 HIGH
Local 		libpng
google 		libpng
android 		Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a cr… NVD-CWE-noinfo
CVE-2016-3751 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267282 7.8 HIGH
Local 		google android libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup syste… CWE-20
 Improper Input Validation  		CVE-2016-3750 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267283 8.4 HIGH
Local 		google android server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 2816… CWE-255
Credentials Management 		CVE-2016-3749 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267284 8.4 HIGH
Local 		google android The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3748 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267285 7.8 HIGH
Local 		google android Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain… NVD-CWE-Other
CVE-2016-3747 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267286 7.8 HIGH
Local 		google android Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain… NVD-CWE-Other
CVE-2016-3746 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267287 9.8 CRITICAL
Network 		google android Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application th… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3745 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267288 7.5 HIGH
Adjacent 		google android Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers t… CWE-119
CWE-362
Incorrect Access of Indexable Resource ('Range Error') 
Race Condition 		CVE-2016-3744 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267289 9.8 CRITICAL
Network 		google android decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service … CWE-20
 Improper Input Validation  		CVE-2016-3743 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm
267290 9.8 CRITICAL
Network 		google android decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory c… CWE-20
 Improper Input Validation  		CVE-2016-3742 2024-11-21 11:50 2016-07-11 Show GitHub Exploit DB Packet Storm