Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251361	7.5	危険	Maulana Al Matien	-	ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4998	2011-12-9 14:18	2011-11-2	Show	GitHub Exploit DB Packet Storm

251362	7.5	危険	Joe Pieruccini	-	MCLogin System の login/login_index.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5000	2011-12-9 14:17	2011-11-2	Show	GitHub Exploit DB Packet Storm

251363	7.5	危険	2daybiz	-	2daybiz Polls Script の searchvote.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5004	2011-12-9 14:16	2011-11-2	Show	GitHub Exploit DB Packet Storm

251364	4.3	警告	Rayzz	-	Rayzz Photoz の members/profileCommentsResponse.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5005	2011-12-9 14:15	2011-11-2	Show	GitHub Exploit DB Packet Storm

251365	7.5	危険	Emophp Programming	-	EMO Realty Manager の googlemap/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5006	2011-12-9 14:15	2011-11-2	Show	GitHub Exploit DB Packet Storm

251366	4.3	警告	ut-files	-	UTStats の pages/match_report.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5007	2011-12-9 14:14	2011-11-2	Show	GitHub Exploit DB Packet Storm

251367	7.5	危険	Denali	-	BrightSuite Groupware における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5008	2011-12-9 14:13	2011-11-2	Show	GitHub Exploit DB Packet Storm

251368	7.5	危険	ut-files	-	UTStats の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5009	2011-12-9 14:12	2011-11-2	Show	GitHub Exploit DB Packet Storm

251369	4.3	警告	FullSite Pty Ltd	-	SchoolMation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5010	2011-12-9 14:10	2011-11-2	Show	GitHub Exploit DB Packet Storm

251370	7.5	危険	FullSite Pty Ltd	-	SchoolMation における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5011	2011-12-9 14:10	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277741	9.8	CRITICAL Network	postgresql debian	postgresql debian_linux	PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a protocol message, which allows remote at…	CWE-89 SQL Injection	CVE-2015-0244	2024-11-21 11:22	2020-01-28	Show	GitHub Exploit DB Packet Storm

277742	8.8	HIGH Network	postgresql debian	postgresql debian_linux	Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allow remote authenticated users to cau…	CWE-120 Classic Buffer Overflow	CVE-2015-0243	2024-11-21 11:22	2020-01-28	Show	GitHub Exploit DB Packet Storm

277743	8.8	HIGH Network	postgresql debian	postgresql debian_linux	Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1, when running on …	CWE-787 Out-of-bounds Write	CVE-2015-0242	2024-11-21 11:22	2020-01-28	Show	GitHub Exploit DB Packet Storm

277744	8.8	HIGH Network	postgresql debian	postgresql debian_linux	The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service (…	CWE-120 Classic Buffer Overflow	CVE-2015-0241	2024-11-21 11:22	2020-01-28	Show	GitHub Exploit DB Packet Storm

277745	9.8	CRITICAL Network	zend	framework	Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.	CWE-89 SQL Injection	CVE-2015-0270	2024-11-21 11:22	2019-10-26	Show	GitHub Exploit DB Packet Storm

277746	9.8	CRITICAL Network	qualcomm	sd_400_firmware sd_800_firmware	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, while verifying provisioning, a buffer overflow can occur.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-9996	2024-11-21 11:22	2018-04-18	Show	GitHub Exploit DB Packet Storm

277747	9.8	CRITICAL Network	qualcomm	sd_400_firmware sd_800_firmware	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, in drmprov_cmd_verify_key(), the variable feature_name_length is not validated. There is …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-9995	2024-11-21 11:22	2018-04-18	Show	GitHub Exploit DB Packet Storm

277748	9.8	CRITICAL Network	qualcomm	sd_400_firmware sd_800_firmware	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, lack of validation of input could cause a integer overflow that could subsequently lead t…	CWE-119 CWE-190 Incorrect Access of Indexable Resource ('Range Error') Integer Overflow or Wraparound	CVE-2014-9994	2024-11-21 11:22	2018-04-18	Show	GitHub Exploit DB Packet Storm

277749	9.8	CRITICAL Network	qualcomm	mdm9635m_firmware sd_400_firmware sd_800_firmware	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to un…	CWE-388 7PK - Errors	CVE-2014-9985	2024-11-21 11:22	2018-04-18	Show	GitHub Exploit DB Packet Storm

277750	7.5	HIGH Network	dlink	dir-815_firmware	D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.	CWE-320 Key Management Errors	CVE-2015-0153	2024-11-21 11:22	2018-04-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed