Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227941 6.8 警告 Zenoss, Inc. - Zenoss におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-0713 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
227942 6.5 警告 Zenoss, Inc. - Zenoss の zport/dmd/Events/getJSONEventsInfo における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0712 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
227943 5 警告 サン・マイクロシステムズ - Sun Directory Server Enterprise Edition などの ns-slapd および slapd.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0708 2012-12-20 19:28 2010-01-20 Show GitHub Exploit DB Packet Storm
227944 6.8 警告 timeclock-software - Employee Timeclock Software の add_user.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-0707 2012-12-20 19:28 2010-02-25 Show GitHub Exploit DB Packet Storm
227945 4.3 警告 subexworld - Subex Nikira Fraud Management System の login/prompt コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0706 2012-12-20 19:28 2010-02-25 Show GitHub Exploit DB Packet Storm
227946 4.3 警告 portwise - PortWise SSL VPN の wa/auth におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0703 2012-12-20 19:28 2010-02-23 Show GitHub Exploit DB Packet Storm
227947 4.3 警告 WampServer - WampServer の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0700 2012-12-20 19:28 2010-02-23 Show GitHub Exploit DB Packet Storm
227948 4.3 警告 videosearchscript - VideoSearchScript Pro の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0699 2012-12-20 19:28 2010-02-23 Show GitHub Exploit DB Packet Storm
227949 6 警告 TIBCO Software - TIBCO Administrator の TIBRepoServer5.jar における全ドメインノード上で任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-0683 2012-12-20 19:28 2010-02-25 Show GitHub Exploit DB Packet Storm
227950 4 警告 WordPress.org - WordPress における他の作成者にゴミ箱の中の投稿を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0682 2012-12-20 19:28 2010-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275121 8.4 HIGH
Local
hp ucmdb_browser HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors. CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2015-6862 2024-11-21 11:35 2016-01-8 Show GitHub Exploit DB Packet Storm
275122 7.8 HIGH
Local
google android The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka i… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6647 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275123 6.2 MEDIUM
Local
google android The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource consumption) by leveraging improper interaction be… CWE-399
 Resource Management Errors
CVE-2015-6646 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275124 5.0 MEDIUM
Local
google android SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a crafted application, aka internal bug 23591205. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6645 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275125 3.3 LOW
Local
google android Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146. CWE-200
Information Exposure
CVE-2015-6644 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275126 6.6 MEDIUM
Physics
google android Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection mechanism via unspecified vectors, aka … CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6643 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275127 9.8 CRITICAL
Network
google android The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors,… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6642 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275128 3.1 LOW
Adjacent
google android Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427. CWE-200
Information Exposure
CVE-2015-6641 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275129 7.8 HIGH
Local
google android The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows at… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6640 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm
275130 7.8 HIGH
Local
google android The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka i… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-6639 2024-11-21 11:35 2016-01-7 Show GitHub Exploit DB Packet Storm