Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242681	7.5	危険	elkagroup	-	elkagroup Image Gallery における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4569	2012-06-26 16:19	2010-01-5	Show	GitHub Exploit DB Packet Storm

242682	4.3	警告	Snitz	-	Snitz Forums 2000 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4554	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242683	9.3	危険	cdmi	-	A2 Media Player Pro におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4549	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242684	4.3	警告	cromosoft	-	Cromosoft Technologies Facil Helpdesk Lite の kbase/kbase.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4544	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242685	6.8	警告	cromosoft	-	Cromosoft Technologies Facil Helpdesk Lite の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-4543	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242686	6.8	警告	bpowerhouse	-	Mini CMS の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4540	2012-06-26 16:19	2010-01-4	Show	GitHub Exploit DB Packet Storm

242687	4.3	警告	Alkacon Software	-	OpenCMS OAMP Comments モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4505	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

242688	5	警告	Boa	-	Boa におけるウィンドウのタイトルを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4496	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

242689	5	警告	AOL	-	AOLserver におけるファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2009-4494	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

242690	5	警告	ACME Laboratories	-	thttpd におけるファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2009-4491	2012-06-26 16:19	2010-01-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267171	7.0	HIGH Local	google	android	The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27208332.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2444	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267172	7.0	HIGH Local	google	android	The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2443	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267173	7.0	HIGH Local	google	android	The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26494907.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2442	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267174	7.0	HIGH Local	google	android	The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26354602.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2441	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267175	7.8	HIGH Local	google	android	libs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 mishandles object references, which allows attackers to gain pr…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2440	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267176	8.8	HIGH Adjacent	google	android	Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2439	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267177	7.8	HIGH Local	google	android	The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27436822.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2437	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267178	7.8	HIGH Local	google	android	The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27299111.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2436	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267179	7.8	HIGH Local	google	android	The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27297988.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2435	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

267180	7.8	HIGH Local	google	android	The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2434	2024-11-21 11:48	2016-05-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed