Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202071 5.5 警告
Local
Google - Android の Telephony の internal/telephony/SMSDispatcher.java におけるプレミアム SMS の支払い確認ダイアログを偽装される脆弱性 CWE-Other
その他
CVE-2016-3883 2016-09-14 17:41 2016-09-6 Show GitHub Exploit DB Packet Storm
202072 7.8 重要
Local
Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm のパワードライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3868 2016-09-14 17:41 2016-09-6 Show GitHub Exploit DB Packet Storm
202073 7.8 重要
Local
Google - Android の MediaMuxer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-Other
その他
CVE-2016-3863 2016-09-14 17:41 2016-09-6 Show GitHub Exploit DB Packet Storm
202074 7.8 重要
Local
Google - 複数の Nexus デバイス上で稼動する Android の Qualcomm カメラドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3859 2016-09-14 17:41 2016-09-6 Show GitHub Exploit DB Packet Storm
202075 5.5 警告
Local
Google - Android のメディアサーバの libstagefright の OMXCodec.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3899 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
202076 6.8 警告
Physics
Google - Android における Factory Reset Protection 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3889 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
202077 2.1
Physics
Google - Android の internal/telephony/SMSDispatcher.java における Factory Reset Protection 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3888 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
202078 7.8 重要
Local
Google - Android の providers/settings/SettingsProvider.java における VPN の常時接続状態を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3887 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
202079 6.8 警告
Physics
Google - Android の System UI Tuner の systemui/statusbar/phone/QuickStatusBarHeader.java における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3886 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
202080 5.5 警告
Local
Google - Android の Notification Manager Service におけるメソッドの呼び出しの制限を回避される脆弱性 CWE-Other
その他
CVE-2016-3884 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290481 - ibm rational_software_architect_design_manager
rhapsody_design_manager
Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via v… CWE-22
Path Traversal
CVE-2013-3042 2024-11-21 10:52 2013-12-15 Show GitHub Exploit DB Packet Storm
290482 - netgear raidiator Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication… CWE-352
 Origin Validation Error
CVE-2013-2752 2024-11-21 10:52 2013-12-13 Show GitHub Exploit DB Packet Storm
290483 - netgear raidiator Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbit… CWE-94
Code Injection
CVE-2013-2751 2024-11-21 10:52 2013-12-13 Show GitHub Exploit DB Packet Storm
290484 - linux linux_kernel The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable fun… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2930 2024-11-21 10:52 2013-12-10 Show GitHub Exploit DB Packet Storm
290485 - linux linux_kernel The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch regis… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2929 2024-11-21 10:52 2013-12-10 Show GitHub Exploit DB Packet Storm
290486 - elecsyscorp director_dnp3_outstation_kernel
director_industrial_communication_gateway
The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service (CPU consumption and commun… CWE-20
 Improper Input Validation 
CVE-2013-2825 2024-11-21 10:52 2013-12-5 Show GitHub Exploit DB Packet Storm
290487 - alstom e-terracontrol The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service (infinite loop and DNP3 service disruption) via crafted input over … CWE-20
 Improper Input Validation 
CVE-2013-2818 2024-11-21 10:52 2013-12-2 Show GitHub Exploit DB Packet Storm
290488 - ge
catapultsoftware
intelligent_platforms_proficy_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_cimplicity
catapult_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_ifix
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent… CWE-20
 Improper Input Validation 
CVE-2013-2823 2024-11-21 10:52 2013-11-22 Show GitHub Exploit DB Packet Storm
290489 - ge
catapultsoftware
intelligent_platforms_proficy_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_cimplicity
catapult_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_ifix
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent… CWE-20
 Improper Input Validation 
CVE-2013-2811 2024-11-21 10:52 2013-11-22 Show GitHub Exploit DB Packet Storm
290490 - dlink dir865l_firmware
dir865l
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b07 allow remote attackers to hijack the authentication of administrators for re… CWE-352
 Origin Validation Error
CVE-2013-3095 2024-11-21 10:52 2013-11-20 Show GitHub Exploit DB Packet Storm