Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251121 6.8 警告 i7MEDIA, LLC - mojoPortal の ファイルマネージャサービスにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3603 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
251122 4.3 警告 i7MEDIA, LLC - mojoPortal の ProfileView.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3602 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
251123 7.5 危険 Invision Power Services, Inc - ibPhotohost の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3601 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
251124 9 危険 オラクル - Oracle VM の OracleVM コンポーネントにおける ovs エージェントの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3585 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251125 4.3 警告 オラクル - Oracle VM の Oracle VM コンポーネントにおける ovs エージェントの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3584 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251126 9 危険 オラクル - Oracle VM の Oracle VM コンポーネントにおける ovs エージェントの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3583 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251127 9 危険 オラクル - Oracle Fusion Middleware の OracleVM コンポーネントにおける ovs エージェントの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3582 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251128 3.5 注意 オラクル - Oracle Fusion Middleware の BPEL Console コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3581 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251129 4.6 警告 オラクル - Oracle OpenSolaris における Kernel/File System の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3580 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251130 6.4 警告 オラクル - Oracle Sun Products Suite の Sun Convergence 1 コンポーネントにおける Webmail の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3579 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266361 5.5 MEDIUM
Local 		google android The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955. CWE-200
Information Exposure 		CVE-2016-6677 2024-11-21 11:56 2016-10-10 Show GitHub Exploit DB Packet Storm
266362 7.8 HIGH
Local 		google android Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6676 2024-11-21 11:56 2016-10-10 Show GitHub Exploit DB Packet Storm
266363 7.8 HIGH
Local 		google android Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6675 2024-11-21 11:56 2016-10-10 Show GitHub Exploit DB Packet Storm
266364 7.8 HIGH
Local 		google android system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380. CWE-20
 Improper Input Validation  		CVE-2016-6674 2024-11-21 11:56 2016-10-10 Show GitHub Exploit DB Packet Storm
266365 7.8 HIGH
Local 		google android The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 30204201. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6673 2024-11-21 11:56 2016-10-10 Show GitHub Exploit DB Packet Storm
266366 7.8 HIGH
Local 		google android The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 30537088. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6672 2024-11-21 11:56 2016-10-10 Show GitHub Exploit DB Packet Storm
266367 7.5 HIGH
Network 		pivotal_software cloud_foundry_cf_mysql The MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cle… CWE-200
Information Exposure 		CVE-2016-6653 2024-11-21 11:56 2016-10-6 Show GitHub Exploit DB Packet Storm
266368 6.1 MEDIUM
Network 		cisco hostscan_engine Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting 		CVE-2016-6436 2024-11-21 11:56 2016-10-6 Show GitHub Exploit DB Packet Storm
266369 6.5 MEDIUM
Network 		cisco firepower_management_center The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376. CWE-200
Information Exposure 		CVE-2016-6435 2024-11-21 11:56 2016-10-6 Show GitHub Exploit DB Packet Storm
266370 7.8 HIGH
Local 		cisco firepower_management_center Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370. CWE-287
Improper Authentication 		CVE-2016-6434 2024-11-21 11:56 2016-10-6 Show GitHub Exploit DB Packet Storm