Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241701 7.5 危険 Angry Donuts
Drupal
- Drupal のモジュールの Nodequeue における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2075 2012-06-26 16:10 2009-06-10 Show GitHub Exploit DB Packet Storm
241702 3.5 注意 Drupal - Drupal 用の Nodequeue モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2074 2012-06-26 16:10 2009-06-10 Show GitHub Exploit DB Packet Storm
241703 6.8 警告 シスコシステムズ - Linksys WRT160N ワイアレスルータにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-2073 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241704 5.4 警告 アップル - Apple Safari における任意の https サイトを偽装される脆弱性 CWE-287
不適切な認証
CVE-2009-2072 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241705 6.8 警告 アップル - Apple Safari における https サイトのコンテキスト内の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2066 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241706 6.8 警告 アップル - Apple Safari における https サイトコンテキスト内の任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2062 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241707 6.8 警告 アップル - Apple Safari における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2058 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241708 7.5 危険 grestul - Grestul の admin/options.php における管理者アカウントを作成される脆弱性 CWE-287
不適切な認証
CVE-2009-2040 2012-06-26 16:10 2009-06-12 Show GitHub Exploit DB Packet Storm
241709 7.5 危険 geekbill - Open Biller の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2036 2012-06-26 16:10 2009-06-12 Show GitHub Exploit DB Packet Storm
241710 6.4 警告 Drupal - Drupal 用の Services モジュールにおける鍵を読み取られる脆弱性 CWE-noinfo
情報不足
CVE-2009-2035 2012-06-26 16:10 2009-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266961 8.1 HIGH
Network
qualcomm sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_625_firmware
sd_650_firmware
sd_652_firmware
sd_820_firmware
sd_820a_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, there is a TOCTOU … CWE-362
CWE-476
Race Condition
 NULL Pointer Dereference
CVE-2016-10439 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266962 7.5 HIGH
Network
qualcomm mdm9206_firmware
mdm9607_firmware
fsm9055_firmware
ipq4019_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9650_firmware
qca4531_firmware
msm8909w_firmware
sd_210_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650… CWE-200
Information Exposure
CVE-2016-10438 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266963 7.5 HIGH
Network
qualcomm mdm9206_firmware
mdm9607_firmware
fsm9055_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9650_firmware
msm8909w_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210… CWE-200
Information Exposure
CVE-2016-10437 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266964 9.8 CRITICAL
Network
qualcomm mdm9206_firmware
mdm9607_firmware
fsm9055_firmware
ipq4019_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9645_firmware
mdm9650_firmware
ipq8064_firmware
msm8909w_firmware<…
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10436 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266965 8.1 HIGH
Network
qualcomm mdm9206_firmware
mdm9625_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9645_firmware
msm8909w_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_400_firmware
s…
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/S… CWE-362
Race Condition
CVE-2016-10435 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266966 7.5 HIGH
Network
qualcomm sd_820_firmware
sd_820a_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB write response function is a buffer from HLO… CWE-287
Improper Authentication
CVE-2016-10434 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
266967 7.5 HIGH
Network
brave brave_browser Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service. CWE-20
 Improper Input Validation 
CVE-2016-10718 2024-11-21 11:44 2018-04-4 Show GitHub Exploit DB Packet Storm
266968 7.8 HIGH
Local
malwarebytes malwarebytes_anti-malware A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting f… CWE-254
 7PK - Security Features
CVE-2016-10717 2024-11-21 11:44 2018-03-22 Show GitHub Exploit DB Packet Storm
266969 5.4 MEDIUM
Network
mail.ru calendar The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspa#period/month URI. CWE-79
Cross-site Scripting
CVE-2016-10716 2024-11-21 11:44 2018-03-16 Show GitHub Exploit DB Packet Storm
266970 5.4 MEDIUM
Network
artezio kanban_board The Artezio Kanban Board plugin 1.4 revision 1914 for Atlassian Jira has XSS via the Board Name in a Create New Board action, related to an artezioboard/mainPage.jspa?kanbanId=7#/kanban-view URI. CWE-79
Cross-site Scripting
CVE-2016-10715 2024-11-21 11:44 2018-03-16 Show GitHub Exploit DB Packet Storm