Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250721 4.3 警告 マイクロソフト - Microsoft mshtml.dll の sertIntoTimeoutList 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3886 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
250722 6.8 警告 CMS Made Simple - CMS Made Simple における管理者パスワードのリセット要求の管理者認証をハイジャックされる脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3884 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
250723 6.8 警告 CMS Made Simple - CMS Made Simple の Change Group Permissions モジュールにおけるクロスサイトリクエストフォージェリ脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3883 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
250724 4.3 警告 CMS Made Simple - CMS Made Simple におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3882 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
250725 4.3 警告 レッドハット - Red Hat JBoss Enterprise Application Platform の JMX Console におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3878 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
250726 4.3 警告 Mahara - Mahara の blocktype/groupviews/theme/raw/groupviews.tpl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3871 2012-03-27 18:42 2010-11-9 Show GitHub Exploit DB Packet Storm
250727 4 警告 レッドハット - RHCS および Dogtag Certificate System における任意の認証番号を生成される脆弱性 CWE-310
暗号の問題 		CVE-2010-3869 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
250728 5.8 警告 レッドハット - RHCS および Dogtag Certificate System における PIN を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-3868 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
250729 2.6 注意 レッドハット - Red Hat JBoss Enterprise Application Platform および JBoss Enterprise Web Platform の Boss Remoting におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3862 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
250730 6.4 警告 レッドハット - Red Hat Conga の Luciにおける repoze.who 認証をバイパスすることが容易になる脆弱性 CWE-287
不適切な認証 		CVE-2010-3852 2012-03-27 18:42 2010-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268811 7.8 HIGH
Local 		google android The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 25913059. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2432 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
268812 7.8 HIGH
Local 		google android The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted application, aka internal … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2431 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
268813 7.8 HIGH
Local 		google android libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to gain privileges via an application containin… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2430 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
268814 9.8 CRITICAL
Network 		google android libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free operations on uninitialized memory, which … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2429 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
268815 9.8 CRITICAL
Network 		google android libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2428 2024-11-21 11:48 2016-05-9 Show GitHub Exploit DB Packet Storm
268816 7.8 HIGH
Local 		accellion file_transfer_appliance The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via unspecified vectors. CWE-264
NVD-CWE-Other
Permissions, Privileges, and Access Controls 		CVE-2016-2353 2024-11-21 11:48 2016-05-7 Show GitHub Exploit DB Packet Storm
268817 8.8 HIGH
Network 		accellion file_transfer_appliance The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-2352 2024-11-21 11:48 2016-05-7 Show GitHub Exploit DB Packet Storm
268818 9.8 CRITICAL
Network 		accellion file_transfer_appliance SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote attackers to execute arbitrary SQL commands via the … CWE-89
SQL Injection 		CVE-2016-2351 2024-11-21 11:48 2016-05-7 Show GitHub Exploit DB Packet Storm
268819 6.1 MEDIUM
Network 		accellion file_transfer_appliance Multiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allow remote attackers to inject arbitrary web script or HTML via unspecified inp… CWE-79
Cross-site Scripting 		CVE-2016-2350 2024-11-21 11:48 2016-05-7 Show GitHub Exploit DB Packet Storm
268820 7.8 HIGH
Local 		linux linux_kernel The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory. CWE-269
 Improper Privilege Management 		CVE-2016-2854 2024-11-21 11:48 2016-05-2 Show GitHub Exploit DB Packet Storm