Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203821 7.8 重要
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3774 2016-07-19 13:54 2016-07-6 Show GitHub Exploit DB Packet Storm
203822 7.8 重要
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3773 2016-07-19 13:54 2016-07-6 Show GitHub Exploit DB Packet Storm
203823 7.8 重要
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3772 2016-07-19 13:54 2016-07-6 Show GitHub Exploit DB Packet Storm
203824 7.8 重要
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3771 2016-07-19 13:54 2016-07-6 Show GitHub Exploit DB Packet Storm
203825 7.8 重要
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3770 2016-07-19 13:54 2016-07-6 Show GitHub Exploit DB Packet Storm
203826 7.8 重要
Local 		Google - Android の DexClassLoader の libdex/OptInvocation.cpp におけるバッファオーバーフローの脆弱性 CWE-119
CWE-264
CVE-2016-3758 2016-07-19 13:41 2016-07-6 Show GitHub Exploit DB Packet Storm
203827 7.8 重要
Local 		Google - Android のメディアサーバの media/libmediaplayerservice/nuplayer/GenericSource.cpp における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-2508 2016-07-19 12:12 2016-07-6 Show GitHub Exploit DB Packet Storm
203828 7.8 重要
Local 		Google - Android のメディアサーバの libstagefright における整数オーバーフローの脆弱性 CWE-119
CWE-189
CVE-2016-2507 2016-07-19 11:59 2016-07-6 Show GitHub Exploit DB Packet Storm
203829 7.8 重要
Local 		Google - Android のメディアサーバの libstagefright の mpeg2ts/ATSParser.cpp における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-2505 2016-07-19 11:52 2016-07-6 Show GitHub Exploit DB Packet Storm
203830 7.8 重要
Local 		Google - Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-8890 2016-07-19 11:52 2016-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290951 - joachim_noreiko flag_module Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to in… CWE-79
Cross-site Scripting 		CVE-2013-5964 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
290952 - owasp enterprise_security_api The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serial… CWE-310
Cryptographic Issues 		CVE-2013-5960 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
290953 - bluecoat proxysgos
proxysg 		Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumption and dropped connections) via a recursive href in an HTML… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5959 2024-11-21 10:58 2013-09-29 Show GitHub Exploit DB Packet Storm
290954 - graphite_project graphite Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-5943 2024-11-21 10:58 2013-09-27 Show GitHub Exploit DB Packet Storm
290955 - graphite_project graphite Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) st… CWE-94
Code Injection 		CVE-2013-5942 2024-11-21 10:58 2013-09-27 Show GitHub Exploit DB Packet Storm
290956 - click2sell click2sell_suite_module Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form. CWE-79
Cross-site Scripting 		CVE-2013-5938 2024-11-21 10:58 2013-09-25 Show GitHub Exploit DB Packet Storm
290957 - click2sell click2sell_suite_module Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete datab… CWE-352
 Origin Validation Error 		CVE-2013-5937 2024-11-21 10:58 2013-09-25 Show GitHub Exploit DB Packet Storm
290958 - open-xchange open-xchange_appsuite The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about (1) runtime activity, (2) networ… CWE-200
Information Exposure 		CVE-2013-5936 2024-11-21 10:58 2013-09-25 Show GitHub Exploit DB Packet Storm
290959 - open-xchange open-xchange_appsuite The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive API calls, which mak… CWE-200
Information Exposure 		CVE-2013-5935 2024-11-21 10:58 2013-09-25 Show GitHub Exploit DB Packet Storm
290960 - open-xchange open-xchange_appsuite Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this passwo… CWE-255
Credentials Management 		CVE-2013-5934 2024-11-21 10:58 2013-09-25 Show GitHub Exploit DB Packet Storm