Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241251 7.5 危険 cmsnx - Million Dollar Text Links の admin.link.modify.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4206 2012-06-26 16:18 2009-12-4 Show GitHub Exploit DB Packet Storm
241252 7.5 危険 Arab Portal - Arab Portal の admin/aclass/admin_func.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4203 2012-06-26 16:18 2009-12-4 Show GitHub Exploit DB Packet Storm
241253 9.3 危険 assistanttools - Mp3 Tag Assistant Professional におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4201 2012-06-26 16:18 2009-12-4 Show GitHub Exploit DB Packet Storm
241254 6.5 警告 cupidsystems - MyMiniBill の my_orders.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4198 2012-06-26 16:18 2009-12-4 Show GitHub Exploit DB Packet Storm
241255 9.3 危険 アップル
マイクロソフト
- Apple Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-4186 2012-06-26 16:18 2009-12-3 Show GitHub Exploit DB Packet Storm
241256 5 警告 korn19
CutePHP
- CutePHP CuteNews および UTF-8 CuteNews における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-4175 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
241257 6 警告 korn19
CutePHP
- CutePHP CuteNews の editnews モジュールにおける管理モデレーションを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4174 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
241258 6.8 警告 korn19
CutePHP
- CutePHP CuteNews および UTF-8 CuteNews におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4173 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
241259 2.6 注意 korn19
CutePHP
- CutePHP CuteNews および UTF-8 CuteNews の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4172 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
241260 4.3 警告 TYPO3 Association
an searchit
- TYPO3 のan_searchit 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4161 2012-06-26 16:18 2009-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267071 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl. CWE-20
 Improper Input Validation 
CVE-2016-10384 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267072 8.1 HIGH
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI. CWE-362
Race Condition
CVE-2016-10383 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267073 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient. CWE-284
Improper Access Control
CVE-2016-10382 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267074 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location. CWE-1
Location
CVE-2016-10381 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267075 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location. CWE-1
Location
CVE-2016-10380 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267076 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated. CWE-20
 Improper Input Validation 
CVE-2016-10347 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267077 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor. CWE-190
 Integer Overflow or Wraparound
CVE-2016-10346 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267078 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE. CWE-476
 NULL Pointer Dereference
CVE-2016-10344 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267079 9.8 CRITICAL
Network
google android In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10343 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267080 6.1 MEDIUM
Network
liferay liferay_portal XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp. CWE-79
Cross-site Scripting
CVE-2016-10404 2024-11-21 11:43 2017-08-8 Show GitHub Exploit DB Packet Storm