Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242431 5.5 警告 Apache Friends - XAMPP の security/xamppsecurity.php における重要な変数を偽装される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6499 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
242432 6.8 警告 Apache Friends - XAMPP の security/xamppsecurity.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6498 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
242433 5 警告 easy-news - Easy Content Management Publishing におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6493 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
242434 7.5 危険 denis moinel - PHPGKit における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6491 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
242435 7.5 危険 flysforum - FLABER の function/update_xml.php における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6490 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
242436 7.5 危険 digiappz - Digiappz DigiAffiliate の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6487 2012-06-26 16:10 2009-03-18 Show GitHub Exploit DB Packet Storm
242437 4.3 警告 BlogEngine.NET - BlogEngine.NET の blog/search.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6476 2012-06-26 16:10 2009-03-16 Show GitHub Exploit DB Packet Storm
242438 7.5 危険 drake team - Drake CMS の components/guestbook/guestbook.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6475 2012-06-26 16:10 2009-03-16 Show GitHub Exploit DB Packet Storm
242439 6.8 警告 edikon - Edikon phpShop におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-6455 2012-06-26 16:10 2009-03-13 Show GitHub Exploit DB Packet Storm
242440 7.5 危険 6rbscript - 6rbScript の section.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6454 2012-06-26 16:10 2009-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267641 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location. CWE-1
Location 		CVE-2016-10381 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267642 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location. CWE-1
Location 		CVE-2016-10380 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267643 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated. CWE-20
 Improper Input Validation  		CVE-2016-10347 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267644 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor. CWE-190
 Integer Overflow or Wraparound 		CVE-2016-10346 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267645 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE. CWE-476
 NULL Pointer Dereference 		CVE-2016-10344 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267646 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10343 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267647 6.1 MEDIUM
Network 		liferay liferay_portal XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp. CWE-79
Cross-site Scripting 		CVE-2016-10404 2024-11-21 11:43 2017-08-8 Show GitHub Exploit DB Packet Storm
267648 7.5 HIGH
Network 		sendio sendio Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted … CWE-538
 File and Directory Information Exposure 		CVE-2016-10399 2024-11-21 11:43 2017-07-28 Show GitHub Exploit DB Packet Storm
267649 7.8 HIGH
Local 		avira antivirus Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer ov… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10402 2024-11-21 11:43 2017-07-27 Show GitHub Exploit DB Packet Storm
267650 8.8 HIGH
Network 		zyxel pk5001z_firmware ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists … CWE-255
Credentials Management 		CVE-2016-10401 2024-11-21 11:43 2017-07-26 Show GitHub Exploit DB Packet Storm