Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242441 4.3 警告 6rbscript - 6rbScript の section.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6453 2012-06-26 16:10 2009-03-13 Show GitHub Exploit DB Packet Storm
242442 7.5 危険 geniuscyber - CMS MAXSITE の Guestbook コンポーネントにおける guestbook に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6446 2012-06-26 16:10 2009-03-9 Show GitHub Exploit DB Packet Storm
242443 10 危険 Baidu, Inc. - Baidu Hi IM の CSTransfer.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6444 2012-06-26 16:10 2009-03-9 Show GitHub Exploit DB Packet Storm
242444 9.3 危険 epic games - ゲーム製品で使用される Epic Games Unreal エンジンクライアントにおけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-6441 2012-06-26 16:10 2009-03-9 Show GitHub Exploit DB Packet Storm
242445 5 警告 Cerberus, LLC - Cerberus Helpdesk における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6440 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
242446 4.3 警告 abledating - ABK-Soft AbleDating の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6439 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
242447 7.5 危険 e107.org
e107coders		 - e107 用 MacGuru BLOG Engine プラグイン のmacgurublog_menu/macgurublog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6438 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
242448 7.5 危険 Blue River - Blue River Interactive Group Sava CMS の index.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6434 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
242449 4.3 警告 Blue River - Blue River Interactive Group Sava CMS の index.cfm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6433 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
242450 4.3 警告 bmforum - BMForum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6431 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267631 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity. CWE-20
 Improper Input Validation  		CVE-2016-10391 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267632 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consumed. CWE-399
 Resource Management Errors 		CVE-2016-10390 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267633 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-10389 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267634 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application. CWE-16
Configuration 		CVE-2016-10388 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267635 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario. CWE-20
 Improper Input Validation  		CVE-2016-10387 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267636 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP. CWE-129
 Improper Validation of Array Index 		CVE-2016-10386 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267637 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS. CWE-416
 Use After Free 		CVE-2016-10385 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267638 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl. CWE-20
 Improper Input Validation  		CVE-2016-10384 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267639 8.1 HIGH
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI. CWE-362
Race Condition 		CVE-2016-10383 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm
267640 9.8 CRITICAL
Network 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient. CWE-284
Improper Access Control 		CVE-2016-10382 2024-11-21 11:43 2017-08-19 Show GitHub Exploit DB Packet Storm