Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202821	5.5	警告 Local	Google	-	Android の Wi-Fi の server/pm/UserManagerService.java における Wi-Fi の設定の変更の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2457	2016-05-12 16:44	2016-05-2	Show	GitHub Exploit DB Packet Storm

202822	7.8	重要 Local	Google	-	Android のメディアサーバの libstagefright の codecs/amrnb/dec/SoftAMR.cpp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2452	2016-05-12 16:44	2016-05-2	Show	GitHub Exploit DB Packet Storm

202823	7.8	重要 Local	Google	-	Android のメディアサーバの libstagefright の codecs/on2/dec/SoftVPX.cpp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2451	2016-05-12 16:44	2016-05-2	Show	GitHub Exploit DB Packet Storm

202824	7.8	重要 Local	Google	-	Android のメディアサーバの libstagefright の codecs/on2/enc/SoftVPXEncoder.cpp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2450	2016-05-12 16:43	2016-05-2	Show	GitHub Exploit DB Packet Storm

202825	7.8	重要 Local	Google	-	Android のメディアサーバの services/camera/libcameraservice/device3/Camera3Device.cpp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2449	2016-05-12 16:43	2016-05-2	Show	GitHub Exploit DB Packet Storm

202826	7.8	重要 Local	Google	-	Android のメディアサーバの media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2448	2016-05-12 16:43	2016-05-2	Show	GitHub Exploit DB Packet Storm

202827	7.8	重要 Local	Google	-	Android の Binder の libs/binder/IPCThreadState.cpp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2440	2016-05-12 16:43	2016-05-2	Show	GitHub Exploit DB Packet Storm

202828	8.8	重要 Adjacent	Google	-	Android の Bluetooth の btif/src/btif_dm.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-2439	2016-05-12 16:43	2016-05-2	Show	GitHub Exploit DB Packet Storm

202829	7.8	重要 Local	Google	-	Nexus 6 および Android One デバイス上で稼動する Android の Qualcomm TrustZone コンポーネントにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2432	2016-05-12 16:43	2016-05-2	Show	GitHub Exploit DB Packet Storm

202830	7.8	重要 Local	Google	-	Nexus および Android One デバイス上で稼動する Android の Qualcomm TrustZone コンポーネントにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2431	2016-05-12 16:43	2016-05-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290761	-	bestpractical	request_tracker	Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to bypass intended restrictions on reading keys in the product's keyring, and tr…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6581	2024-11-21 10:46	2013-07-24	Show	GitHub Exploit DB Packet Storm

290762	-	bestpractical	request_tracker	Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the UI labels unencrypted messages as unencrypted, which might make it easier for r…	CWE-310 Cryptographic Issues	CVE-2012-6580	2024-11-21 10:46	2013-07-24	Show	GitHub Exploit DB Packet Storm

290763	-	bestpractical	request_tracker	Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cau…	CWE-310 Cryptographic Issues	CVE-2012-6579	2024-11-21 10:46	2013-07-24	Show	GitHub Exploit DB Packet Storm

290764	-	bestpractical	request_tracker	Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote at…	CWE-310 Cryptographic Issues	CVE-2012-6578	2024-11-21 10:46	2013-07-24	Show	GitHub Exploit DB Packet Storm

290765	-	ibm autonomy	lotus_notes keyview_idol	Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6349	2024-11-21 10:46	2013-07-19	Show	GitHub Exploit DB Packet Storm

290766	-	monroe_electronics digital_alert_systems	r189_one-net_eas dasdec_eas	The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it …	CWE-310 Cryptographic Issues	CVE-2013-0137	2024-11-21 10:46	2013-07-1	Show	GitHub Exploit DB Packet Storm

290767	-	typoheads	formhandler	SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2012-6577	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm

290768	-	antti_alamki	prh_search	Cross-site scripting (XSS) vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified…	CWE-79 Cross-site Scripting	CVE-2012-6576	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm

290769	-	mobile4social	exposed_filter_data	Cross-site scripting (XSS) vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-6575	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm

290770	-	soprano	fonecta_verify	Cross-site scripting (XSS) vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspeci…	CWE-79 Cross-site Scripting	CVE-2012-6574	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm