Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200101	7.8	重要 Local	Google	-	Nexus デバイス上で稼動する Android の system_server における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-6674	2016-10-14 16:35	2016-10-3	Show	GitHub Exploit DB Packet Storm

200102	7.8	重要 Local	Google	-	Nexus 9 デバイス上で稼動する Android の NVIDIA カメラドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-6673	2016-10-14 16:35	2016-10-3	Show	GitHub Exploit DB Packet Storm

200103	7.8	重要 Local	Google	-	Nexus 9 デバイス上で稼動する Android の NVIDIA MMC テストドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3930	2016-10-14 16:33	2016-10-3	Show	GitHub Exploit DB Packet Storm

200104	9.8	緊急 Network	Google	-	Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2016-3929	2016-10-14 16:33	2016-10-3	Show	GitHub Exploit DB Packet Storm

200105	7.8	重要 Local	Google	-	Android の MediaTek ビデオドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3928	2016-10-14 16:33	2016-10-3	Show	GitHub Exploit DB Packet Storm

200106	9.8	緊急 Network	Google	-	Android の Qualcomm QDSP6v2 ドライバの sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-6696	2016-10-14 11:51	2016-10-3	Show	GitHub Exploit DB Packet Storm

200107	9.8	緊急 Network	Google	-	Android の Qualcomm QDSP6v2 ドライバの sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2016-6695	2016-10-14 11:51	2016-10-3	Show	GitHub Exploit DB Packet Storm

200108	9.8	緊急 Network	Google	-	Android の Qualcomm QDSP6v2 ドライバの sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-6694	2016-10-14 11:51	2016-10-3	Show	GitHub Exploit DB Packet Storm

200109	9.8	緊急 Network	Google	-	Android の Qualcomm QDSP6v2 ドライバの sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-6693	2016-10-14 11:51	2016-10-3	Show	GitHub Exploit DB Packet Storm

200110	9.8	緊急 Network	Google	-	Android の Qualcomm MDSS ドライバの drivers/video/msm/mdss/mdss_mdp_pp.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-6692	2016-10-14 11:51	2016-10-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346941	-	hp	hp-ux	HP-UX vgdisplay program gives root access to local users.	NVD-CWE-Other	CVE-1999-0309	2013-07-21 13:11	1997-02-1	Show	GitHub Exploit DB Packet Storm

346942	-	aspcodecms	aspcode_cms	Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to hijack the authentication of an administr…	CWE-352 Origin Validation Error	CVE-2010-0711	2013-07-20 15:53	2010-02-26	Show	GitHub Exploit DB Packet Storm

346943	-	sun	solaris	Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related to the "/proc" filesystem, which trigger a null dereference.	NVD-CWE-Other	CVE-2005-3250	2013-07-20 14:20	2005-10-18	Show	GitHub Exploit DB Packet Storm

346944	-	iatek	portalapp	Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter.	NVD-CWE-Other	CVE-2005-4482	2013-07-18 22:37	2005-12-22	Show	GitHub Exploit DB Packet Storm

346945	-	speartek	speartek	Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.	NVD-CWE-Other	CVE-2005-4493	2013-07-17 23:41	2005-12-22	Show	GitHub Exploit DB Packet Storm

346946	-	osticket	osticket	Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to …	NVD-CWE-Other	CVE-2005-1436	2013-07-14 13:38	2005-05-3	Show	GitHub Exploit DB Packet Storm

346947	-	symantec	discovery on_command_discovery	The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain …	NVD-CWE-Other	CVE-2005-3316	2013-07-7 13:45	2005-10-27	Show	GitHub Exploit DB Packet Storm

346948	-	onlinetechtools.com	owos_lite	SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.	NVD-CWE-Other	CVE-2005-3852	2013-07-3 23:48	2005-11-27	Show	GitHub Exploit DB Packet Storm

346949	-	vmware	workstation player ace server fusion	The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Pl…	CWE-200 Information Exposure	CVE-2010-1138	2013-05-15 12:07	2010-04-13	Show	GitHub Exploit DB Packet Storm

346950	-	vmware	workstation player server fusion vix_api	Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VM…	CWE-134 Use of Externally-Controlled Format String	CVE-2010-1139	2013-05-15 12:07	2010-04-13	Show	GitHub Exploit DB Packet Storm