Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241721 7.5 危険 diskos - Diskos CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4798 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
241722 7.5 危険 glFusion - glFusion の private/system/classes/listfactory.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4796 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
241723 7.5 危険 community cms - Community CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4794 2012-06-26 16:19 2010-04-22 Show GitHub Exploit DB Packet Storm
241724 7.5 危険 bhavesh chauhan
Joomla!
- Joomla! 用の Quick News コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4785 2012-06-26 16:19 2010-04-21 Show GitHub Exploit DB Packet Storm
241725 9.3 危険 Blizzard Entertainment, Inc. - Warcraft III: The Frozen Throne の JASS スクリプトインタプリタにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-4768 2012-06-26 16:19 2010-04-20 Show GitHub Exploit DB Packet Storm
241726 5 警告 cnr.somee - CNR Hikaye Portal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4765 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
241727 9.3 危険 マイクロソフト
アドビシステムズ
- Adobe Reader におけるユーザに任意のコードを実行させる脆弱性 CWE-94
コード・インジェクション
CVE-2009-4764 2012-06-26 16:19 2010-04-5 Show GitHub Exploit DB Packet Storm
241728 9.3 危険 dicas - dicas Mpegable Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4758 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
241729 9.3 危険 evils-world - BrotherSoft EW-MusicPlayer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4757 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
241730 9.3 危険 beatport - Beatport Player の TraktorBeatport.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4756 2012-06-26 16:19 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266641 5.5 MEDIUM
Local
google android mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive info… CWE-200
Information Exposure
CVE-2016-2459 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266642 5.5 MEDIUM
Local
google android The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attachments, which allows attackers to obtain sensitive … CWE-200
Information Exposure
CVE-2016-2458 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266643 5.5 MEDIUM
Local
google android server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2457 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266644 7.0 HIGH
Local
google android The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27275187. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2456 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266645 5.5 MEDIUM
Local
google android The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service (reboot) via a crafted file, aka internal bug 26221024. CWE-20
 Improper Input Validation 
CVE-2016-2454 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266646 7.0 HIGH
Local
google android_one The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27549705. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2453 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266647 7.8 HIGH
Local
google android codecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate buffer sizes, which allo… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2452 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266648 7.8 HIGH
Local
google android codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate VPX output buffer sizes, w… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2451 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266649 7.8 HIGH
Local
google android codecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate OMX buffer sizes, w… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2450 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
266650 7.8 HIGH
Local
google android services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate template IDs… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2449 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm