Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243041	9.3	危険	emweb	-	Emweb Wt における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2010-1273	2012-06-26 16:19	2010-03-16	Show	GitHub Exploit DB Packet Storm

243042	6.8	警告	fh54	-	justVisual CMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1268	2012-06-26 16:19	2010-04-6	Show	GitHub Exploit DB Packet Storm

243043	7.5	危険	ekith Joomla!	-	Adam Corley dcs_flashgames における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1265	2012-06-26 16:19	2010-04-6	Show	GitHub Exploit DB Packet Storm

243044	6.8	警告	Apache Software Foundation	-	Apache ActiveMQ の createDestination.action におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-1244	2012-06-26 16:19	2010-04-5	Show	GitHub Exploit DB Packet Storm

243045	5	警告	アップル	-	Apple iPhone の HTTP クライアント機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1226	2012-06-26 16:19	2010-04-1	Show	GitHub Exploit DB Packet Storm

243046	4.3	警告	Digium	-	Asterisk Open Source の main/acl.c における ACL ルールおよびアクセスサービスを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1224	2012-06-26 16:19	2010-02-24	Show	GitHub Exploit DB Packet Storm

243047	6.8	警告	com janews Joomla!	-	Joomla! の janews コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1219	2012-06-26 16:19	2010-03-30	Show	GitHub Exploit DB Packet Storm

243048	4.3	警告	Imagely WordPress.org	-	Wordpress の NextGEN Gallery プラグインの xml/media-rss.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1186	2012-06-26 16:19	2010-04-7	Show	GitHub Exploit DB Packet Storm

243049	4.3	警告	アップル	-	Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1181	2012-06-26 16:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

243050	9.3	危険	アップル	-	Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2010-1180	2012-06-26 16:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268771	7.8	HIGH Local	google	android	omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer port, which allows…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3824	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

268772	7.8	HIGH Local	google	android	The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3823	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

268773	7.8	HIGH Local	google debian	android debian_linux	exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3822	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

268774	9.8	CRITICAL Network	google	android	libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arb…	CWE-476 NULL Pointer Dereference	CVE-2016-3821	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

268775	9.8	CRITICAL Network	google	android	The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3820	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

268776	9.8	CRITICAL Network	google	android	Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remo…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3819	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

268777	5.5	MEDIUM Local	sap	hana_db	The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispa…	CWE-200 Information Exposure	CVE-2016-3640	2024-11-21 11:50	2016-08-5	Show	GitHub Exploit DB Packet Storm

268778	9.8	CRITICAL Network	redhat	jboss_operations_network	The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.	CWE-20 Improper Input Validation	CVE-2016-3737	2024-11-21 11:50	2016-08-2	Show	GitHub Exploit DB Packet Storm

268779	5.3	MEDIUM Network	oracle mariadb ibm debian canonical	linux mariadb mysql powerkvm debian_linux ubuntu_linux	Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote auth…	NVD-CWE-noinfo	CVE-2016-3615	2024-11-21 11:50	2016-07-21	Show	GitHub Exploit DB Packet Storm

268780	5.3	MEDIUM Network	oracle canonical	mysql ubuntu_linux	Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption.	NVD-CWE-noinfo	CVE-2016-3614	2024-11-21 11:50	2016-07-21	Show	GitHub Exploit DB Packet Storm