Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189271 6.1 警告
Network
amtyThumb project - WordPress 用 amtyThumb amty-thumb-recent-post プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-17059 2017-12-28 15:11 2017-12-4 Show GitHub Exploit DB Packet Storm
189272 7.8 重要
Local
Google - Android のカーネルのサウンドタイマーにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-13167 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189273 7.8 重要
Local
Google - Android のカーネルの v4l2 ビデオドライバにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-13166 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189274 7.8 重要
Local
Google - Android のカーネルのファイルシステムにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-13165 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189275 7.5 重要
Network
Google - Android のカーネルの binder ドライバにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-13164 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189276 7.8 重要
Local
Google - Android のカーネルの mtp usb ドライバにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-13163 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189277 7.8 重要
Local
Google - Android のカーネルの binder における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-13162 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189278 9.1 緊急
Network
Google - Android のメディアフレームワークにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-13150 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189279 9.1 緊急
Network
Google - Android のメディアフレームワークにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-13149 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
189280 8.8 重要
Network
Google - Android のメディアフレームワークにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-0878 2017-12-28 14:43 2017-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355071 - e107 e107 Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist' NVD-CWE-Other
CVE-2010-2098 2012-12-13 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
355072 - kerio personal_firewall
serverfirewall
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Env… NVD-CWE-Other
CVE-2005-3286 2012-12-13 11:43 2005-10-23 Show GitHub Exploit DB Packet Storm
355073 - freebsd freebsd sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allo… CWE-20
 Improper Input Validation 
CVE-2010-2020 2012-11-6 13:41 2010-05-29 Show GitHub Exploit DB Packet Storm
355074 - tiki tikiwiki_cms\/groupware TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulne… CWE-20
 Improper Input Validation 
CVE-2005-0200 2012-10-24 13:00 2005-05-2 Show GitHub Exploit DB Packet Storm
355075 - tiki tikiwiki_cms\/groupware Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CWE-79
Cross-site Scripting
CVE-2005-3283 2012-10-24 13:00 2005-10-23 Show GitHub Exploit DB Packet Storm
355076 - oracle database_server Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2010-0851 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
355077 - oracle database_server Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown v… NVD-CWE-noinfo
CVE-2010-0852 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
355078 - oracle fusion_middleware
database_server
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1; allows remote attackers to affe… NVD-CWE-noinfo
CVE-2010-0853 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
355079 - oracle database_server Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INS… NVD-CWE-noinfo
CVE-2010-0854 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
355080 - oracle fusion_middleware Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors. NVD-CWE-noinfo
CVE-2010-0856 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm