Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240231 7.5 危険 kubix - Kubix の includes/functions.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-7116 2012-09-25 15:36 2007-03-5 Show GitHub Exploit DB Packet Storm
240232 6 警告 MAXDev - MD-Pro の error.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-7112 2012-09-25 15:36 2007-03-5 Show GitHub Exploit DB Packet Storm
240233 7.5 危険 Mambo Foundation - Mambo 用の MOStlyCE コンポーネントの htmltemplate.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7104 2012-09-25 15:36 2007-03-3 Show GitHub Exploit DB Packet Storm
240234 7.5 危険 matthias dietrich - phpBurningPortal quiz-modul における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7102 2012-09-25 15:36 2007-03-3 Show GitHub Exploit DB Packet Storm
240235 10 危険 klink - dim3 の host.c におけるバッファオーバーフローの脆弱性 - CVE-2006-7096 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240236 10 危険 klink - dim3 の socket.c における整数符号エラーの脆弱性 - CVE-2006-7095 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240237 5.8 警告 mamboxchange - Mambo LaiThai Security Patch におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7093 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240238 7.5 危険 mamboxchange - Mambo LaiThai の includes/mambo.php における SQL インジェクションの脆弱性 - CVE-2006-7092 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240239 7.5 危険 hinton design - phpht Topsites FREE における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7091 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
240240 4.3 警告 hot links - Hot Links の dlback.php スクリプトにおける重要な情報を取得される脆弱性 - CVE-2006-7086 2012-09-25 15:36 2007-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268151 7.8 HIGH
Local 		google android The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28377352 and Qualcomm inter… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3842 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268152 9.8 CRITICAL
Network 		google android Conscrypt in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-05 does not properly identify session reuse, which allows remote attackers to execute arbitrary c… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3840 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268153 5.5 MEDIUM
Local 		google android Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of Bluetooth 911 functionality) via a craf… CWE-284
Improper Access Control 		CVE-2016-3839 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268154 5.5 MEDIUM
Local 		google android Android 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of locked-screen 911 functionality) via a crafted application that uses the app-pinning feature, aka internal bug 287… CWE-284
Improper Access Control 		CVE-2016-3838 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268155 5.5 MEDIUM
Local 		google android service/jni/com_android_server_wifi_WifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted… CWE-200
Information Exposure 		CVE-2016-3837 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268156 5.5 MEDIUM
Local 		google android The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of … CWE-200
Information Exposure 		CVE-2016-3836 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268157 5.5 MEDIUM
Local 		google android The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, … CWE-200
Information Exposure 		CVE-2016-3835 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268158 5.5 MEDIUM
Local 		google android The camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allow attackers to bypass intended access restrictions and obtain sensitive information … CWE-200
Information Exposure 		CVE-2016-3834 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268159 7.8 HIGH
Local 		google android The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGE_USERS and CREATE_USERS permissions, which allows attackers to bypa… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3833 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
268160 7.8 HIGH
Local 		google android The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated from the Package Manager, which allows att… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3832 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm