Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251361 7.5 危険 Maulana Al Matien - ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4998 2011-12-9 14:18 2011-11-2 Show GitHub Exploit DB Packet Storm
251362 7.5 危険 Joe Pieruccini - MCLogin System の login/login_index.php におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5000 2011-12-9 14:17 2011-11-2 Show GitHub Exploit DB Packet Storm
251363 7.5 危険 2daybiz - 2daybiz Polls Script の searchvote.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5004 2011-12-9 14:16 2011-11-2 Show GitHub Exploit DB Packet Storm
251364 4.3 警告 Rayzz - Rayzz Photoz の members/profileCommentsResponse.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5005 2011-12-9 14:15 2011-11-2 Show GitHub Exploit DB Packet Storm
251365 7.5 危険 Emophp Programming - EMO Realty Manager の googlemap/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5006 2011-12-9 14:15 2011-11-2 Show GitHub Exploit DB Packet Storm
251366 4.3 警告 ut-files - UTStats の pages/match_report.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5007 2011-12-9 14:14 2011-11-2 Show GitHub Exploit DB Packet Storm
251367 7.5 危険 Denali - BrightSuite Groupware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5008 2011-12-9 14:13 2011-11-2 Show GitHub Exploit DB Packet Storm
251368 7.5 危険 ut-files - UTStats の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5009 2011-12-9 14:12 2011-11-2 Show GitHub Exploit DB Packet Storm
251369 4.3 警告 FullSite Pty Ltd - SchoolMation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5010 2011-12-9 14:10 2011-11-2 Show GitHub Exploit DB Packet Storm
251370 7.5 危険 FullSite Pty Ltd - SchoolMation における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5011 2011-12-9 14:10 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277711 9.8 CRITICAL
Network 		google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9956 2024-11-21 11:22 2018-04-5 Show GitHub Exploit DB Packet Storm
277712 9.8 CRITICAL
Network 		google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9955 2024-11-21 11:22 2018-04-5 Show GitHub Exploit DB Packet Storm
277713 9.8 CRITICAL
Network 		google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9954 2024-11-21 11:22 2018-04-5 Show GitHub Exploit DB Packet Storm
277714 9.8 CRITICAL
Network 		google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-9953 2024-11-21 11:22 2018-04-5 Show GitHub Exploit DB Packet Storm
277715 6.5 MEDIUM
Network 		apache qpid The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) con… CWE-19
 Data Processing Errors 		CVE-2015-0203 2024-11-21 11:22 2018-02-22 Show GitHub Exploit DB Packet Storm
277716 7.5 HIGH
Network 		apache wss4j Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers t… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2015-0226 2024-11-21 11:22 2017-10-30 Show GitHub Exploit DB Packet Storm
277717 7.5 HIGH
Network 		apache qpid qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an incomplet… CWE-19
 Data Processing Errors 		CVE-2015-0224 2024-11-21 11:22 2017-10-30 Show GitHub Exploit DB Packet Storm
277718 4.7 MEDIUM
Local 		tug texlive The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-0296 2024-11-21 11:22 2017-10-7 Show GitHub Exploit DB Packet Storm
277719 3.3 LOW
Local 		redhat openshift selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack. CWE-200
Information Exposure 		CVE-2015-0238 2024-11-21 11:22 2017-09-26 Show GitHub Exploit DB Packet Storm
277720 8.8 HIGH
Network 		kallithea-scm kallithea Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. CWE-352
 Origin Validation Error 		CVE-2015-0276 2024-11-21 11:22 2017-09-21 Show GitHub Exploit DB Packet Storm