Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204261 7.8 重要
Local 		Google - 複数の Nexus および Pixel C デバイス上で稼動する Android のカーネルのファイルシステムの実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3775 2016-07-19 15:39 2016-07-6 Show GitHub Exploit DB Packet Storm
204262 7.5 重要
Network 		Google - Android のメディアサーバの libstagefright の MPEG4Extractor.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3766 2016-07-19 15:11 2016-07-6 Show GitHub Exploit DB Packet Storm
204263 7.7 重要
Local 		Google - Android のメディアサーバの decoder/impeg2d_bitstream.c におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
CWE-399
CVE-2016-3765 2016-07-19 15:11 2016-07-6 Show GitHub Exploit DB Packet Storm
204264 4 警告
Local 		Google - Android のメディアサーバの media/libmediaplayerservice/MetadataRetrieverClient.cpp における重要なポインタ情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3764 2016-07-19 15:11 2016-07-6 Show GitHub Exploit DB Packet Storm
204265 3.3 低
Local 		Google - Android の Proxy Auto-Config 機能の net/PacProxySelector.java における認証情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3763 2016-07-19 15:10 2016-07-6 Show GitHub Exploit DB Packet Storm
204266 7.8 重要
Local 		Google - Android の socket サブシステムにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3762 2016-07-19 15:10 2016-07-6 Show GitHub Exploit DB Packet Storm
204267 5.5 警告
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ディスプレイドライバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-3816 2016-07-19 14:53 2016-07-6 Show GitHub Exploit DB Packet Storm
204268 5.5 警告
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ビデオコーデックドライバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-3812 2016-07-19 14:53 2016-07-6 Show GitHub Exploit DB Packet Storm
204269 5.5 警告
Local 		Google - Android One デバイス上で稼動する Android の MediaTek Wi-Fi ドライバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-3810 2016-07-19 14:53 2016-07-6 Show GitHub Exploit DB Packet Storm
204270 7.8 重要
Local 		Google - Android One デバイス上で稼動する Android の MediaTek ディスプレイドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3806 2016-07-19 14:53 2016-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350591 - - - The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct b… NVD-CWE-Other
CVE-2003-1230 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350592 - ecw-shop ecw-shop Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NVD-CWE-Other
CVE-2003-1231 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350593 - - - Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter. NVD-CWE-Other
CVE-2003-1243 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350594 - - - index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is set to the MD5 hash of a session cookie. NVD-CWE-Other
CVE-2003-1245 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350595 - active_php_bookmarks active_php_bookmarks add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified auth_user_id parameter. NVD-CWE-Other
CVE-2003-1255 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350596 - nullsoft winamp Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .b4s file containing (1) a long playlist name or (2) a lo… NVD-CWE-Other
CVE-2003-1272 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350597 - nullsoft winamp Winamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a playlist name that contains some non-English characters, e.g. Cyrillic characters. NVD-CWE-Other
CVE-2003-1273 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350598 - nullsoft winamp Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux. NVD-CWE-Other
CVE-2003-1274 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350599 - - - Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the default scripts (1) environ.pl and (2) testcgi.exe. NVD-CWE-Other
CVE-2003-1284 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
350600 - sambar sambar_server Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2)… NVD-CWE-Other
CVE-2003-1285 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm