Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205421 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm ビデオドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3939 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205422 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm ビデオドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3938 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205423 7.8 重要
Local 		Google - Android の MediaTek ビデオドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3937 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205424 7.8 重要
Local 		Google - Android の MediaTek ビデオドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3936 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205425 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm カメラドライバにおける権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-3934 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205426 7.8 重要
Local 		Google - Nexus 9 および Pixel C デバイス上で稼動する Android のメディアサーバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3933 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205427 7.8 重要
Local 		Google - Android のメディアサーバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3932 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205428 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm QSEE Communicator ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3931 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205429 9.8 緊急
Network 		Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2016-3927 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
205430 9.8 緊急
Network 		Google - 複数の Nexus デバイス上で稼動する Android の Qualcomm コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2016-3926 2016-10-14 11:50 2016-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348061 - softbiz dating_script SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4. CWE-89
SQL Injection 		CVE-2009-2790 2017-08-17 10:30 2009-08-18 Show GitHub Exploit DB Packet Storm
348062 - apple airport_utility AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions vi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-2822 2017-08-17 10:30 2010-04-6 Show GitHub Exploit DB Packet Storm
348063 - rpm rpm lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by cre… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2005-4889 2017-08-17 10:29 2010-06-9 Show GitHub Exploit DB Packet Storm
348064 - debian dpkg dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerabl… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-2768 2017-08-17 10:29 2010-06-9 Show GitHub Exploit DB Packet Storm
348065 - realnetworks realone_enterprise_desktop
realone_player 		Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the loc… NVD-CWE-Other
CVE-2003-1509 2017-08-17 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
348066 - sun one_web_server Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and con… CWE-79
Cross-site Scripting 		CVE-2003-1577 2017-08-17 10:29 2010-02-6 Show GitHub Exploit DB Packet Storm
348067 - sun one_web_server Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview funct… NVD-CWE-Other
CVE-2003-1578 2017-08-17 10:29 2010-02-6 Show GitHub Exploit DB Packet Storm
348068 - webtrends webtrends_log_analyzer Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (IL… CWE-79
Cross-site Scripting 		CVE-2003-1583 2017-08-17 10:29 2010-02-6 Show GitHub Exploit DB Packet Storm
348069 - surfstats surfstats Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (IL… CWE-79
Cross-site Scripting 		CVE-2003-1584 2017-08-17 10:29 2010-02-6 Show GitHub Exploit DB Packet Storm
348070 - alentum weblog_expert Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption … CWE-79
Cross-site Scripting 		CVE-2003-1585 2017-08-17 10:29 2010-02-6 Show GitHub Exploit DB Packet Storm