Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204321 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm ビデオドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3939 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204322 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm ビデオドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3938 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204323 7.8 重要
Local 		Google - Android の MediaTek ビデオドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3937 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204324 7.8 重要
Local 		Google - Android の MediaTek ビデオドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3936 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204325 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm カメラドライバにおける権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-3934 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204326 7.8 重要
Local 		Google - Nexus 9 および Pixel C デバイス上で稼動する Android のメディアサーバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3933 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204327 7.8 重要
Local 		Google - Android のメディアサーバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3932 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204328 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm QSEE Communicator ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3931 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204329 9.8 緊急
Network 		Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2016-3927 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
204330 9.8 緊急
Network 		Google - 複数の Nexus デバイス上で稼動する Android の Qualcomm コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2016-3926 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290071 8.8 HIGH
Network 		web2project web2project Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search_string parameter in the contacts module to … CWE-89
SQL Injection 		CVE-2014-3119 2024-11-21 11:07 2020-02-1 Show GitHub Exploit DB Packet Storm
290072 6.1 MEDIUM
Network 		infoware mapsuite Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2014-2843 2024-11-21 11:07 2020-02-1 Show GitHub Exploit DB Packet Storm
290073 5.9 MEDIUM
Network 		lwp\ \ The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the (1) HTTPS… CWE-295
Improper Certificate Validation  		CVE-2014-3230 2024-11-21 11:07 2020-01-29 Show GitHub Exploit DB Packet Storm
290074 9.8 CRITICAL
Network 		fishshell fish fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbitrary code via unspecified vectors, as d… CWE-20
 Improper Input Validation  		CVE-2014-2914 2024-11-21 11:07 2020-01-29 Show GitHub Exploit DB Packet Storm
290075 7.0 HIGH
Local 		fishshell fish The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable… CWE-362
Race Condition 		CVE-2014-2906 2024-11-21 11:07 2020-01-29 Show GitHub Exploit DB Packet Storm
290076 9.8 CRITICAL
Network 		wolfssl wolfssl wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not… CWE-125
Out-of-bounds Read 		CVE-2014-2898 2024-11-21 11:07 2020-01-29 Show GitHub Exploit DB Packet Storm
290077 9.8 CRITICAL
Network 		wolfssl wolfssl The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to have unspecified impact via a crafted HMA… CWE-125
Out-of-bounds Read 		CVE-2014-2897 2024-11-21 11:07 2020-01-29 Show GitHub Exploit DB Packet Storm
290078 9.8 CRITICAL
Network 		wolfssl wolfssl The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an o… CWE-125
Out-of-bounds Read 		CVE-2014-2896 2024-11-21 11:07 2020-01-29 Show GitHub Exploit DB Packet Storm
290079 7.5 HIGH
Network 		publify_project publify Publify before 8.0.1 is vulnerable to a Denial of Service attack CWE-400
 Uncontrolled Resource Consumption 		CVE-2014-3211 2024-11-21 11:07 2020-01-9 Show GitHub Exploit DB Packet Storm
290080 8.8 HIGH
Network 		dlink dwr-113_firmware Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that chang… CWE-352
 Origin Validation Error 		CVE-2014-3136 2024-11-21 11:07 2019-12-28 Show GitHub Exploit DB Packet Storm