Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241911 7.5 危険 B-Elektro
Joomla!		 - Joomla! の addressbook コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1471 2012-06-26 16:19 2010-04-19 Show GitHub Exploit DB Packet Storm
241912 7.5 危険 dev.pucit.edu.pk
Joomla!		 - Joomla! 用の Web TV コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1470 2012-06-26 16:19 2010-04-19 Show GitHub Exploit DB Packet Storm
241913 7.5 危険 Joomla!
focusdev		 - Joomla! の mv_restaurantmenumanager コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1468 2012-06-26 16:19 2010-04-19 Show GitHub Exploit DB Packet Storm
241914 7.5 危険 francois raynaud - openUrgence Vaccin における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1467 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
241915 6.8 警告 francois raynaud - openUrgence Vaccin の scr/soustab.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1466 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
241916 5 警告 gogoritas
Joomla!		 - Joomla! 用の Photo Battle コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1461 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
241917 4.9 警告 GNUstep - GNUstep Base の gdomap の s/gdomap.c における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-1457 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
241918 5 警告 エフ・セキュア - F-Secure Internet Security 2010 における検知を回避される脆弱性 CWE-Other
その他 		CVE-2010-1425 2012-06-26 16:19 2010-04-15 Show GitHub Exploit DB Packet Storm
241919 10 危険 アップル - WebKit の page/Geolocation.cpp における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1386 2012-06-26 16:19 2010-08-19 Show GitHub Exploit DB Packet Storm
241920 7.5 危険 gamescript - GS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1368 2012-06-26 16:19 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266681 7.8 HIGH
Local 		google android Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows … CWE-119
CWE-189
Incorrect Access of Indexable Resource ('Range Error') 
Numeric Errors 		CVE-2016-2507 2024-11-21 11:48 2016-07-11 Show GitHub Exploit DB Packet Storm
266682 9.8 CRITICAL
Network 		google android DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2506 2024-11-21 11:48 2016-07-11 Show GitHub Exploit DB Packet Storm
266683 7.8 HIGH
Local 		google android mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2505 2024-11-21 11:48 2016-07-11 Show GitHub Exploit DB Packet Storm
266684 7.8 HIGH
Local 		google android The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2503 2024-11-21 11:48 2016-07-11 Show GitHub Exploit DB Packet Storm
266685 7.8 HIGH
Local 		google android drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a large size in a GSER_IOCTL ioctl call, aka A… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2502 2024-11-21 11:48 2016-07-11 Show GitHub Exploit DB Packet Storm
266686 7.8 HIGH
Local 		google android The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 27890772 and Q… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2501 2024-11-21 11:48 2016-07-11 Show GitHub Exploit DB Packet Storm
266687 8.0 HIGH
Network 		ibm websphere_commerce Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 allows remote authenticated users to hijack the authe… CWE-352
 Origin Validation Error 		CVE-2016-2863 2024-11-21 11:48 2016-07-4 Show GitHub Exploit DB Packet Storm
266688 6.1 MEDIUM
Network 		ibm websphere_commerce Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5 allows remote attackers to inject arbitrary web s… CWE-79
Cross-site Scripting 		CVE-2016-2862 2024-11-21 11:48 2016-07-4 Show GitHub Exploit DB Packet Storm
266689 5.3 MEDIUM
Network 		ibm qradar_security_information_and_event_manager
security_qradar_incident_forensics 		Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL. CWE-22
Path Traversal 		CVE-2016-2872 2024-11-21 11:48 2016-07-2 Show GitHub Exploit DB Packet Storm
266690 2.7 LOW
Network 		ibm websphere_datapower_xc10_appliance_firmware Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2870 2024-11-21 11:48 2016-07-2 Show GitHub Exploit DB Packet Storm