Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242411 7.5 危険 goople cms - Goople CMS のwin/content/upload.php における管理者のアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6118 2012-06-26 16:10 2009-02-11 Show GitHub Exploit DB Packet Storm
242412 7.5 危険 Joomla!
extrosoft		 - Joomla! の EXtrovert Software thyme コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6116 2012-06-26 16:10 2009-02-11 Show GitHub Exploit DB Packet Storm
242413 7.5 危険 a4desk - A4Desk PHP Event Calendar における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6104 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
242414 6.8 警告 a4desk - A4Desk Event Calendar の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6103 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
242415 7.5 危険 ezonescripts - Link Trader Script の ratelink.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6102 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
242416 7.5 危険 ezonescripts - Adult Banner Exchange Website の click.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6101 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
242417 6.8 警告 berlios - Discussion Forums 2k における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6100 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
242418 4.3 警告 celoxis - Celoxis Technologies Celoxis の user.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6094 2012-06-26 16:10 2009-02-9 Show GitHub Exploit DB Packet Storm
242419 6.8 警告 bmforum - BMForum の plugins.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6091 2012-06-26 16:10 2009-02-9 Show GitHub Exploit DB Packet Storm
242420 4.3 警告 camera life - Camera Life の topic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6087 2012-06-26 16:10 2009-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267711 7.8 HIGH
Local 		linux linux_kernel An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Cr… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10277 2024-11-21 11:43 2017-05-13 Show GitHub Exploit DB Packet Storm
267712 7.8 HIGH
Local 		google android An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critic… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10276 2024-11-21 11:43 2017-05-13 Show GitHub Exploit DB Packet Storm
267713 7.8 HIGH
Local 		google android An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critic… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10275 2024-11-21 11:43 2017-05-13 Show GitHub Exploit DB Packet Storm
267714 7.8 HIGH
Local 		google android An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10274 2024-11-21 11:43 2017-05-13 Show GitHub Exploit DB Packet Storm
267715 7.5 HIGH
Network 		oneplus oxygenos An issue was discovered on OnePlus devices such as the 3T. The OnePlus OTA Updater pushes the signed-OTA image over HTTP without TLS. While it does not allow for installation of arbitrary OTAs (due t… CWE-284
Improper Access Control 		CVE-2016-10370 2024-11-21 11:43 2017-05-12 Show GitHub Exploit DB Packet Storm
267716 5.5 MEDIUM
Local 		libtiff libtiff The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF f… CWE-20
 Improper Input Validation  		CVE-2016-10371 2024-11-21 11:43 2017-05-10 Show GitHub Exploit DB Packet Storm
267717 7.8 HIGH
Local 		lxterminal_project lxterminal unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypass… CWE-284
Improper Access Control 		CVE-2016-10369 2024-11-21 11:43 2017-05-9 Show GitHub Exploit DB Packet Storm
267718 6.1 MEDIUM
Network 		opsview opsview Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers … CWE-601
Open Redirect 		CVE-2016-10368 2024-11-21 11:43 2017-05-3 Show GitHub Exploit DB Packet Storm
267719 7.5 HIGH
Network 		opsview opsview In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthenticated Directory Traversal vulnerabilit… CWE-22
Path Traversal 		CVE-2016-10367 2024-11-21 11:43 2017-05-3 Show GitHub Exploit DB Packet Storm
267720 9.8 CRITICAL
Network 		debian
fedoraproject
tug 		debian_linux
fedora
tex_live 		TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file. CWE-20
 Improper Input Validation  		CVE-2016-10243 2024-11-21 11:43 2017-05-2 Show GitHub Exploit DB Packet Storm