Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
205661	7.8	重要 Local	Google	-	Android のフレームワーク API における不特定の保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3832	2016-08-12 16:12	2016-08-1	Show	GitHub Exploit DB Packet Storm

205662	7.5	重要 Network	Google	-	Android の Telephony コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-3831	2016-08-12 16:12	2016-08-1	Show	GitHub Exploit DB Packet Storm

205663	5.5	警告 Local	Google	-	Android のメディアサーバの libstagefright の codecs/aacdec/SoftAAC2.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-3830	2016-08-12 16:12	2016-08-1	Show	GitHub Exploit DB Packet Storm

205664	5.5	警告 Local	Google	-	Android のメディアサーバの ih264d デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3829	2016-08-12 16:12	2016-08-1	Show	GitHub Exploit DB Packet Storm

205665	5.5	警告 Local	Google	-	Android のメディアサーバの decoder/ih264d_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3828	2016-08-12 16:12	2016-08-1	Show	GitHub Exploit DB Packet Storm

205666	5.5	警告 Local	Google	-	Android のメディアサーバの libstagefright の codecs/hevcdec/SoftHEVC.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3827	2016-08-12 16:12	2016-08-1	Show	GitHub Exploit DB Packet Storm

205667	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/misc/qseecom.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9887	2016-08-12 16:12	2016-08-1	Show	GitHub Exploit DB Packet Storm

205668	7.8	重要 Local	Google	-	Android の Qualcomm コンポーネントの drivers/thermal/supply_lm_core.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3855	2016-08-12 11:13	2016-08-1	Show	GitHub Exploit DB Packet Storm

205669	7.8	重要 Local	Google	-	Android の Qualcomm コンポーネントの drivers/media/video/msm/msm_mctl_buf.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3854	2016-08-12 11:13	2016-08-1	Show	GitHub Exploit DB Packet Storm

205670	5.5	警告 Local	Google Linux	-	Nexus 6 および 7 (2013) デバイス上で稼動する Android で使用される Linux Kernel の kernel/resource.c における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2015-8944	2016-08-12 11:13	2016-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348081	-	mozilla	mozilla	The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or …	CWE-94 Code Injection	CVE-2005-4874	2017-08-8 10:29	2005-12-31	Show	GitHub Exploit DB Packet Storm

348082	-	typo3	typo3	TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment…	CWE-200 Information Exposure	CVE-2005-4875	2017-08-8 10:29	2005-12-31	Show	GitHub Exploit DB Packet Storm

348083	-	ignite_realtime	openfire	Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions before 2.3.0 Beta 2, allows remote attac…	CWE-79 Cross-site Scripting	CVE-2005-4876	2017-08-8 10:29	2005-12-31	Show	GitHub Exploit DB Packet Storm

348084	-	ignite_realtime	openfire	Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2005-4877	2017-08-8 10:29	2005-12-31	Show	GitHub Exploit DB Packet Storm

348085	-	sun	sunforum	Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), a…	NVD-CWE-noinfo	CVE-2004-2758	2017-08-8 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

348086	-	sun	storedge_qfs storedge_sam-qfs storeedge_performance_suite storeedge_utilization_suite	Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by acce…	NVD-CWE-Other	CVE-2004-2759	2017-08-8 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

348087	-	bajie	java_http_server	Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is …	CWE-79 Cross-site Scripting	CVE-2003-1543	2017-08-8 10:29	2003-12-31	Show	GitHub Exploit DB Packet Storm

348088	-	microsoft	windows_2000	Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service (reboot) by obtaining a read lock on…	NVD-CWE-Other	CVE-2003-1544	2017-08-8 10:29	2003-12-31	Show	GitHub Exploit DB Packet Storm

348089	-	filebased	guestbook	Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section.	CWE-79 Cross-site Scripting	CVE-2003-1546	2017-08-8 10:29	2003-12-31	Show	GitHub Exploit DB Packet Storm

348090	-	xoops	xoops	XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.	CWE-200 Information Exposure	CVE-2003-1550	2017-08-8 10:29	2003-12-31	Show	GitHub Exploit DB Packet Storm