Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199491	7.8	重要 Local	Google	-	複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm カメラドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3903	2016-10-14 16:38	2016-10-3	Show	GitHub Exploit DB Packet Storm

199492	5.5	警告 Local	Google	-	Nexus 5X および Nexus 6P デバイス上で稼動する Android の Qualcomm IPA ドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3902	2016-10-14 16:38	2016-10-3	Show	GitHub Exploit DB Packet Storm

199493	7.8	重要 Local	Google	-	複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm 暗号化エンジンドライバにおける整数オーバーフローの脆弱性	CWE-Other その他	CVE-2016-3901	2016-10-14 16:38	2016-10-3	Show	GitHub Exploit DB Packet Storm

199494	7.8	重要 Local	Google	-	Android の ServiceManager の cmds/servicemanager/service_manager.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3900	2016-10-14 16:38	2016-10-3	Show	GitHub Exploit DB Packet Storm

199495	6.5	警告 Adjacent	Google	-	Android の Wi-Fi の server/wifi/anqp/VenueNameElement.java におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3882	2016-10-14 16:38	2016-10-3	Show	GitHub Exploit DB Packet Storm

199496	5.5	警告 Local	Google	-	複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm サウンドドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3860	2016-10-14 16:38	2016-10-3	Show	GitHub Exploit DB Packet Storm

199497	5.5	警告 Local	Google	-	複数の Nexus デバイス上で稼動する Android のカーネルのサウンドドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-6690	2016-10-14 16:35	2016-10-3	Show	GitHub Exploit DB Packet Storm

199498	5.5	警告 Local	Google	-	複数の Nexus および Android One デバイス上で稼動する Android のカーネルにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-6684	2016-10-14 16:35	2016-10-3	Show	GitHub Exploit DB Packet Storm

199499	5.5	警告 Local	Google	-	Nexus デバイス上で稼動する Android のカーネルにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-6683	2016-10-14 16:35	2016-10-3	Show	GitHub Exploit DB Packet Storm

199500	5.5	警告 Local	Google	-	複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm QDSP6v2 ドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-6682	2016-10-14 16:35	2016-10-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346971	-	php	php	The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended ac…	CWE-20 Improper Input Validation	CVE-2010-1129	2010-08-31 14:42	2010-03-27	Show	GitHub Exploit DB Packet Storm

346972	-	uninet	statsplus	Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to s…	CWE-79 Cross-site Scripting	CVE-2002-2330	2010-08-30 13:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

346973	-	squid-cache	squid	The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (…	NVD-CWE-Other	CVE-2010-0639	2010-08-2 13:00	2010-02-16	Show	GitHub Exploit DB Packet Storm

346974	-	squid-cache	squid	Per: http://cwe.mitre.org/data/definitions/476.html 'NULL Pointer Dereference'	NVD-CWE-Other	CVE-2010-0639	2010-08-2 13:00	2010-02-16	Show	GitHub Exploit DB Packet Storm

346975	-	mediawiki	mediawiki	Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets …	CWE-79 Cross-site Scripting	CVE-2010-1647	2010-07-30 14:48	2010-06-8	Show	GitHub Exploit DB Packet Storm

346976	-	mediawiki	mediawiki	Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for re…	CWE-352 Origin Validation Error	CVE-2010-1648	2010-07-30 14:48	2010-06-8	Show	GitHub Exploit DB Packet Storm

346977	-	openx	openx	Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/in…	NVD-CWE-noinfo CWE-287 Improper Authentication	CVE-2009-4830	2010-07-30 13:00	2010-04-28	Show	GitHub Exploit DB Packet Storm

346978	-	cisco	ios	Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service (device reload) via crafted Skinny Client Control Pro…	NVD-CWE-noinfo	CVE-2010-0584	2010-07-13 14:50	2010-03-26	Show	GitHub Exploit DB Packet Storm

346979	-	frank-karau	phpfk_php_forum	Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of …	CWE-79 Cross-site Scripting	CVE-2009-4677	2010-07-13 14:48	2010-03-9	Show	GitHub Exploit DB Packet Storm

346980	-	gnome	screensaver	gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to ac…	NVD-CWE-Other	CVE-2009-4641	2010-07-7 13:00	2010-02-12	Show	GitHub Exploit DB Packet Storm