Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201331 7.8 重要
Local
Google - Android の Qualcomm ブートローダにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-6729 2016-11-29 17:08 2016-11-7 Show GitHub Exploit DB Packet Storm
201332 7.8 重要
Local
Google - Android の カーネル ION サブシステムにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-6728 2016-11-29 17:08 2016-11-7 Show GitHub Exploit DB Packet Storm
201333 9.8 緊急
Network
Google - Android の Qualcomm 暗号化ドライバにおけるリモートでコードを実行される脆弱性 CWE-Other
その他
CVE-2016-6725 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
201334 5.5 警告
Local
Google - Android の Input Manager Service におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6724 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
201335 4.7 警告
Local
Google - Android の Proxy Auto Config におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6723 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
201336 5.5 警告
Local
Google - Android のメディアサーバにおける情報公開の脆弱性 CWE-200
情報漏えい
CVE-2016-6721 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
201337 5.5 警告
Local
Google - Android の Bluetooth コンポーネントにおける権限昇格の脆弱性 CWE-Other
その他
CVE-2016-6719 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
201338 7 重要
Local
Google - Android のメディアサーバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-6717 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
201339 5.5 警告
Local
Google - Android の AOSP ランチャーにおける権限昇格の脆弱性 CWE-Other
その他
CVE-2016-6716 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
201340 5.5 警告
Local
Google - Android の Framework API における権限昇格の脆弱性 CWE-Other
その他
CVE-2016-6715 2016-11-29 17:07 2016-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290271 - moodle
fedoraproject
moodle
fedora
Multiple cross-site request forgery (CSRF) vulnerabilities in user/profile/index.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 allo… CWE-352
 Origin Validation Error
CVE-2014-0010 2024-11-21 11:01 2014-01-21 Show GitHub Exploit DB Packet Storm
290272 - moodle moodle course/loginas.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 does not enforce the moodle/site:accessallgroups capability requiremen… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0009 2024-11-21 11:01 2014-01-21 Show GitHub Exploit DB Packet Storm
290273 - moodle moodle lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitiv… CWE-255
Credentials Management
CVE-2014-0008 2024-11-21 11:01 2014-01-21 Show GitHub Exploit DB Packet Storm
290274 - microsoft windows_7 win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Server 2008 R2 SP1 does not properly consider thread-owned objects during the processing of window handles, which allows local use… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0262 2024-11-21 11:01 2014-01-16 Show GitHub Exploit DB Packet Storm
290275 - microsoft dynamics_ax Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) inst… CWE-20
 Improper Input Validation 
CVE-2014-0261 2024-11-21 11:01 2014-01-16 Show GitHub Exploit DB Packet Storm
290276 - microsoft sharepoint_server
word
office_web_apps
office_web_apps_server
office_compatibility_pack
word_viewer
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0260 2024-11-21 11:01 2014-01-16 Show GitHub Exploit DB Packet Storm
290277 - microsoft office_compatibility_pack
word
Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Me… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0259 2024-11-21 11:01 2014-01-16 Show GitHub Exploit DB Packet Storm
290278 - microsoft word
office_compatibility_pack
word_viewer
Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Of… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0258 2024-11-21 11:01 2014-01-16 Show GitHub Exploit DB Packet Storm
290279 - oracle peoplesoft_products Unspecified vulnerability in the PeopleSoft Enterprise HRMS Human Resources component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown… NVD-CWE-noinfo
CVE-2014-0388 2024-11-21 11:01 2014-01-16 Show GitHub Exploit DB Packet Storm
290280 - oracle jdk
jre
Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related … NVD-CWE-noinfo
CVE-2014-0387 2024-11-21 11:01 2014-01-16 Show GitHub Exploit DB Packet Storm