Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251211 4.3 警告 dietrich ayala - MantisBT の NuSOAP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3070 2012-03-27 18:42 2010-09-28 Show GitHub Exploit DB Packet Storm
251212 10 危険 シスコシステムズ - Cisco ICM の Setup Manager の agent.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3040 2012-03-27 18:42 2010-11-3 Show GitHub Exploit DB Packet Storm
251213 6.8 警告 シスコシステムズ - Cisco CUCM の /usr/local/cm/bin/pktCap_protectData における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-3039 2012-03-27 18:42 2010-11-3 Show GitHub Exploit DB Packet Storm
251214 10 危険 シスコシステムズ - Cisco UVC System 5110 および 5115 における不正アクセスの脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-3038 2012-03-27 18:42 2010-11-17 Show GitHub Exploit DB Packet Storm
251215 8.5 危険 シスコシステムズ - 複数の Cisco UVC System 製品における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-3037 2012-03-27 18:42 2010-11-17 Show GitHub Exploit DB Packet Storm
251216 10 危険 シスコシステムズ - Cisco CiscoWorks Common Service の Web サーバの認証機能における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-3036 2012-03-27 18:42 2010-10-27 Show GitHub Exploit DB Packet Storm
251217 5 警告 シスコシステムズ - Cisco WLC における ACL を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3034 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251218 9 危険 シスコシステムズ - Cisco WLC におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3033 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251219 4.3 警告 RSAセキュリティ - RSA Access Manager Server における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3018 2012-03-27 18:42 2010-09-9 Show GitHub Exploit DB Packet Storm
251220 5.7 警告 RSAセキュリティ - RSA Access Manager Agent における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-3017 2012-03-27 18:42 2010-09-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258051 9.8 CRITICAL
Network
qualcomm mdm9206_firmware
apq8096au_firmware
msm8996au_firmware
mdm9650_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_425_firmware
sd_430_firmware
sd_625_firmware
s…
In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 8… CWE-287
Improper Authentication
CVE-2017-14911 2024-11-21 12:13 2018-03-31 Show GitHub Exploit DB Packet Storm
258052 9.8 CRITICAL
Network
google android In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding is not supported by the crypto storage APIs. NVD-CWE-noinfo
CVE-2017-14906 2024-11-21 12:13 2018-03-31 Show GitHub Exploit DB Packet Storm
258053 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbit… CWE-129
 Improper Validation of Array Index
CVE-2017-14889 2024-11-21 12:13 2018-03-17 Show GitHub Exploit DB Packet Storm
258054 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of messages of type eWNI_SME_MODIFY_ADDITIONAL_IES, an integer overfl… CWE-119
CWE-190
Incorrect Access of Indexable Resource ('Range Error') 
 Integer Overflow or Wraparound
CVE-2017-14887 2024-11-21 12:13 2018-03-17 Show GitHub Exploit DB Packet Storm
258055 7.5 HIGH
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor… CWE-119
CWE-200
Incorrect Access of Indexable Resource ('Range Error') 
Information Exposure
CVE-2017-14882 2024-11-21 12:13 2018-03-16 Show GitHub Exploit DB Packet Storm
258056 7.5 HIGH
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is used to copy data has a size of only 8 bits and can be excee… CWE-20
 Improper Input Validation 
CVE-2017-14878 2024-11-21 12:13 2018-03-16 Show GitHub Exploit DB Packet Storm
258057 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, wma_unified_link_peer_stats_event_handler function has a variable num_rates which repre… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-14885 2024-11-21 12:13 2018-03-16 Show GitHub Exploit DB Packet Storm
258058 6.1 MEDIUM
Network
netiq access_manager Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites. CWE-601
Open Redirect
CVE-2017-14802 2024-11-21 12:13 2018-03-3 Show GitHub Exploit DB Packet Storm
258059 6.1 MEDIUM
Network
netiq access_manager Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter. CWE-79
Cross-site Scripting
CVE-2017-14801 2024-11-21 12:13 2018-03-3 Show GitHub Exploit DB Packet Storm
258060 5.3 MEDIUM
Network
suse
opensuse
linux_enterprise_software_development_kit
leap
The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroot… CWE-20
 Improper Input Validation 
CVE-2017-14804 2024-11-21 12:13 2018-03-2 Show GitHub Exploit DB Packet Storm