Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241231 6.8 警告 elvinbts - Elvin の login.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2129 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
241232 7.5 危険 elvinbts - Elvin の close_bug.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2128 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
241233 4.3 警告 elvinbts - Elvin の show_activity.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2127 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
241234 4.3 警告 elvinbts - Elvin の close_bug.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2126 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
241235 4 警告 elvinbts - Elvin の delete_bug.php における任意のバグを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2125 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
241236 7.5 危険 elvinbts - Elvin の page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2124 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
241237 7.5 危険 elvinbts - Elvin における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2123 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
241238 4.3 警告 F5 Networks - F5 FirePass SSL VPN のログインインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2119 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
241239 7.5 危険 daan sprenkels - FretsWeb における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2113 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
241240 7.5 危険 frank-karau - phpFK の include/page_bottom.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2112 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267881 9.8 CRITICAL
Network 		qualcomm msm8974_firmware In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCrypto_DeriveKeysFromSessionKey() could lead to a buffer overflow vul… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-9179 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267882 9.8 CRITICAL
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of validation of the return value prior to us… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-9174 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267883 9.8 CRITICAL
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, missing of return value check in memscpy can cause… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-9173 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267884 9.8 CRITICAL
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the function "Certificate_CreateWithBuffer" in … CWE-476
 NULL Pointer Dereference 		CVE-2015-9162 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267885 9.8 CRITICAL
Network 		qualcomm mdm9625_firmware
mdm9635m_firmware
sd_400_firmware
sd_800_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated. CWE-20
 Improper Input Validation  		CVE-2015-9151 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267886 9.8 CRITICAL
Network 		qualcomm mdm9625_firmware
mdm9635m_firmware
sd_400_firmware
sd_800_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, while computing the length of memory allocated for a Diag event, if t… CWE-119
CWE-190
Incorrect Access of Indexable Resource ('Range Error') 
 Integer Overflow or Wraparound 		CVE-2015-9150 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267887 9.8 CRITICAL
Network 		qualcomm mdm9625_firmware
mdm9635m_firmware
sd_400_firmware
sd_800_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated. CWE-20
 Improper Input Validation  		CVE-2015-9147 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267888 7.5 HIGH
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_615_firmware
sd_616_firmware
sd_415_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qsee_macc_gen_ecc_privkey', untruste… CWE-476
 NULL Pointer Dereference 		CVE-2015-9134 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267889 9.8 CRITICAL
Network 		qualcomm sd_400_firmware
sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_800_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 617, SD 650/52, SD 800, and SD 810, if Widevine App TZ_WV_CMD_DECRYPT_VIDEO is called … CWE-190
 Integer Overflow or Wraparound 		CVE-2015-9133 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
267890 7.5 HIGH
Network 		qualcomm sd_400_firmware
sd_410_firmware
sd_412_firmware
sd_615_firmware
sd_616_firmware
sd_415_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, lack of input validation in qsee can lead t… CWE-20
 Improper Input Validation  		CVE-2015-9131 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm