Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
204091	7.8	重要 Local	Google	-	Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm Wi-Fi ドライバの CORE/HDD/src/wlan_hdd_hostapd.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3792	2016-07-19 15:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

204092	7.8	重要 Local	Google	-	複数の Nexus および Pixel C デバイス上で稼動する Android のカーネルのファイルシステムの実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3775	2016-07-19 15:39	2016-07-6	Show	GitHub Exploit DB Packet Storm

204093	7.5	重要 Network	Google	-	Android のメディアサーバの libstagefright の MPEG4Extractor.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-3766	2016-07-19 15:11	2016-07-6	Show	GitHub Exploit DB Packet Storm

204094	7.7	重要 Local	Google	-	Android のメディアサーバの decoder/impeg2d_bitstream.c におけるプロセスメモリから重要な情報を取得される脆弱性	CWE-200 CWE-399	CVE-2016-3765	2016-07-19 15:11	2016-07-6	Show	GitHub Exploit DB Packet Storm

204095	4	警告 Local	Google	-	Android のメディアサーバの media/libmediaplayerservice/MetadataRetrieverClient.cpp における重要なポインタ情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-3764	2016-07-19 15:11	2016-07-6	Show	GitHub Exploit DB Packet Storm

204096	3.3	低 Local	Google	-	Android の Proxy Auto-Config 機能の net/PacProxySelector.java における認証情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-3763	2016-07-19 15:10	2016-07-6	Show	GitHub Exploit DB Packet Storm

204097	7.8	重要 Local	Google	-	Android の socket サブシステムにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3762	2016-07-19 15:10	2016-07-6	Show	GitHub Exploit DB Packet Storm

204098	5.5	警告 Local	Google	-	Android One デバイス上で稼動する Android の MediaTek ディスプレイドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3816	2016-07-19 14:53	2016-07-6	Show	GitHub Exploit DB Packet Storm

204099	5.5	警告 Local	Google	-	Android One デバイス上で稼動する Android の MediaTek ビデオコーデックドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3812	2016-07-19 14:53	2016-07-6	Show	GitHub Exploit DB Packet Storm

204100	5.5	警告 Local	Google	-	Android One デバイス上で稼動する Android の MediaTek Wi-Fi ドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3810	2016-07-19 14:53	2016-07-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290601	-	cisco	unified_communications_manager	The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extr…	CWE-200 Information Exposure	CVE-2013-6978	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290602	-	efrontlearning	efront	Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1…	CWE-79 Cross-site Scripting	CVE-2013-7194	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290603	-	etoshop	c2c_forward_auction_creator	Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID …	CWE-89 SQL Injection	CVE-2013-7193	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290604	-	etoshop	dynamic_biz_website_builder_quickweb	Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, o…	CWE-89 SQL Injection	CVE-2013-7192	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290605	-	tenmiles	helpdesk_pilot	Cross-site scripting (XSS) vulnerability in Tenmiles Helpdesk Pilot allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI for a ticket.	CWE-79 Cross-site Scripting	CVE-2013-7191	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290606	-	typo3	flow	Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in TYPO3 Flow (formerly FLOW3) 1.1.x before 1.1.1 and 2.0.x before 2.0.1 allows remote attackers …	CWE-79 Cross-site Scripting	CVE-2013-7082	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290607	-	typo3	typo3	Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2013-7077	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290608	-	typo3	typo3	Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vecto…	CWE-79 Cross-site Scripting	CVE-2013-7076	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290609	-	typo3	typo3	Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions…	CWE-79 Cross-site Scripting	CVE-2013-7074	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm

290610	-	livezilla	livezilla	Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.	CWE-79 Cross-site Scripting	CVE-2013-7002	2024-11-21 11:00	2013-12-21	Show	GitHub Exploit DB Packet Storm