Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251041 4.3 警告 SolarWinds - SolarWinds Orion NPM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4828 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251042 4.3 警告 Snitz - Snitz Forums の members.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4827 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251043 7.5 危険 Snitz - Snitz Forums の members.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4826 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251044 4.3 警告 WordPress.org
pleer		 - WordPress 用の Twitter Feed プラグイン の magpie_debug.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4825 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251045 7.5 危険 bestsoftinc - BSI Advance Hotel Booking System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4814 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251046 3.5 注意 Drupal
scheepers de bruin		 - Drupal 用の Category Tokens モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4813 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251047 6.5 警告 6kbbs - 6kbbs における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4812 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251048 4.3 警告 6kbbs - 6kbbs の ajaxmember.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4811 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251049 7.5 危険 awcm - AWCM における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4810 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251050 7.5 危険 liberologico - DBSite の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4809 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247711 5.5 MEDIUM
Local 		qualcomm ipq4019_firmware
ipq8064_firmware
ipq8074_firmware
mdm9150_firmware
mdm9206_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
msm8996au_firmware
qcs405_firmware 		Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag… CWE-200
Information Exposure 		CVE-2018-11942 2024-11-21 12:44 2019-06-15 Show GitHub Exploit DB Packet Storm
247712 7.8 HIGH
Local 		qualcomm mdm9150_firmware
mdm9206_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
msm8909w_firmware
qca6574au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware 		Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MD… CWE-416
 Use After Free 		CVE-2018-11939 2024-11-21 12:44 2019-06-15 Show GitHub Exploit DB Packet Storm
247713 7.8 HIGH
Local 		qualcomm mdm9150_firmware
mdm9206_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
msm8996au_firmware
qca6174a_firmware
qca6574au_firmware
qca9377_firmware
qca9379_firmwa… 		Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra… CWE-787
 Out-of-bounds Write 		CVE-2018-11934 2024-11-21 12:44 2019-06-15 Show GitHub Exploit DB Packet Storm
247714 7.8 HIGH
Local 		qualcomm mdm9150_firmware
mdm9206_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
msm8996au_firmware
qcs405_firmware
qcs605_firmware
sd_425_firmware
sd_427_firmware
s… 		Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MD… CWE-787
 Out-of-bounds Write 		CVE-2018-11929 2024-11-21 12:44 2019-06-15 Show GitHub Exploit DB Packet Storm
247715 7.8 HIGH
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
msm8996au_firmware
qcs605_firmware
sd_425_firmware
sd_427_firmware
sd_430_firmware
sd_435_firmware
sd… 		Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9640, MD… CWE-416
 Use After Free 		CVE-2018-11819 2024-11-21 12:44 2019-06-15 Show GitHub Exploit DB Packet Storm
247716 6.7 MEDIUM
Local 		intel converged_security_management_engine_firmware
server_platform_services_firmware
trusted_execution_engine_firmware 		Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before versio… CWE-20
 Improper Input Validation  		CVE-2018-12147 2024-11-21 12:44 2019-06-14 Show GitHub Exploit DB Packet Storm
247717 9.8 CRITICAL
Network 		apache fineract SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table. CWE-89
SQL Injection 		CVE-2018-11801 2024-11-21 12:44 2019-06-12 Show GitHub Exploit DB Packet Storm
247718 9.8 CRITICAL
Network 		apache fineract SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related table. CWE-89
SQL Injection 		CVE-2018-11800 2024-11-21 12:44 2019-06-12 Show GitHub Exploit DB Packet Storm
247719 5.6 MEDIUM
Local 		intel
fedoraproject 		microarchitectural_fill_buffer_data_sampling_firmware
fedora 		Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure… CWE-200
Information Exposure 		CVE-2018-12130 2024-11-21 12:44 2019-05-31 Show GitHub Exploit DB Packet Storm
247720 5.6 MEDIUM
Local 		intel
fedoraproject 		microarchitectural_load_port_data_sampling_firmware
fedora 		Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via… CWE-200
Information Exposure 		CVE-2018-12127 2024-11-21 12:44 2019-05-31 Show GitHub Exploit DB Packet Storm