Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203941	7.8	重要 Local	Google	-	Android のメディアサーバの mm-video-v4l2 venc コンポーネントにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2016-2481	2016-06-14 16:54	2016-06-6	Show	GitHub Exploit DB Packet Storm

203942	7.8	重要 Local	Google	-	Android のメディアサーバの mm-video-v4l2 vidc コンポーネントにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-2480	2016-06-14 16:54	2016-06-6	Show	GitHub Exploit DB Packet Storm

203943	7.8	重要 Local	Google	-	Android のメディアサーバの mm-video-v4l2 vdec コンポーネントにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-2479	2016-06-14 16:54	2016-06-6	Show	GitHub Exploit DB Packet Storm

203944	7.8	重要 Local	Google	-	Android のメディアサーバの mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-2478	2016-06-14 16:54	2016-06-6	Show	GitHub Exploit DB Packet Storm

203945	7.8	重要 Local	Google	-	Android のメディアサーバの mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-2477	2016-06-14 16:54	2016-06-6	Show	GitHub Exploit DB Packet Storm

203946	7.8	重要 Local	Google	-	Android のメディアサーバにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2016-2476	2016-06-14 16:54	2016-06-6	Show	GitHub Exploit DB Packet Storm

203947	8.1	重要 Network	Debian BeanShell project	-	BeanShell における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-2510	2016-06-14 16:09	2016-02-18	Show	GitHub Exploit DB Packet Storm

203948	4.7	警告	Xen プロジェクト	-	Xen の include/asm-x86/paging.h の paging_invlpg 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-1571	2016-06-14 16:09	2016-01-20	Show	GitHub Exploit DB Packet Storm

203949	5	警告	Apache Software Foundation	-	Apache POI の HSLFSlideShow におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-9527	2016-06-14 16:09	2014-11-27	Show	GitHub Exploit DB Packet Storm

203950	8.8	重要 Adjacent	MEDHOST, Inc.	-	MEDHOST Perioperative Information Management System (PIMS) がハードコードされた認証情報を使用する問題	CWE-Other その他	CVE-2016-4328	2016-06-14 16:09	2016-05-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349731	-	info-zip	unzip	Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.	NVD-CWE-Other	CVE-2001-1268	2010-05-25 13:10	2001-07-12	Show	GitHub Exploit DB Packet Storm

349732	-	info-zip	unzip	Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.	NVD-CWE-Other	CVE-2001-1269	2010-05-25 13:10	2001-07-12	Show	GitHub Exploit DB Packet Storm

349733	-	xfree86_project	xfree86_x_server	dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.	NVD-CWE-Other	CVE-2001-1409	2010-05-25 13:10	2003-07-24	Show	GitHub Exploit DB Packet Storm

349734	-	sebrac.webcindario	migascms	SQL injection vulnerability in function.php in MigasCMS 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categorie parameter in a catalogo act…	CWE-89 SQL Injection	CVE-2010-2012	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

349735	-	createch-group	lisk_cms	Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter.	CWE-79 Cross-site Scripting	CVE-2010-2014	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

349736	-	createch-group	lisk_cms	Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a view_inbox action to cp/cp_messages.php or (2) the id par…	CWE-89 SQL Injection	CVE-2010-2015	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

349737	-	bukulokomedia	lokomedia_cms	Cross-site scripting (XSS) vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to inject arbitrary web script or HTML via the kata parameter. NOTE: some of t…	CWE-79 Cross-site Scripting	CVE-2010-2017	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

349738	-	bukulokomedia	lokomedia_cms	SQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the file parameter. NOTE: the prov…	CWE-89 SQL Injection	CVE-2010-2019	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

349739	-	apple	java	Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not properly handle mediaLibImage objects, which allows remote attackers to execute arbitrary code or cause …	CWE-399 Resource Management Errors	CVE-2010-0538	2010-05-24 13:00	2010-05-22	Show	GitHub Exploit DB Packet Storm

349740	-	apple	java_1.5 java_1.6	Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary c…	CWE-189 Numeric Errors	CVE-2010-0539	2010-05-24 13:00	2010-05-22	Show	GitHub Exploit DB Packet Storm