Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252211 7.5 危険 Curtiss Grymala - CAG CMS の click.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4857 2012-02-9 11:03 2011-10-5 Show GitHub Exploit DB Packet Storm
252212 7.5 危険 ASP indir - xWeblog の arsiv.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4856 2012-02-9 11:03 2011-10-5 Show GitHub Exploit DB Packet Storm
252213 7.5 危険 ASP indir - xWeblog の oku.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4855 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
252214 6.8 警告 Zuitu - Zuitu の ajax/coupon.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4854 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
252215 7.5 危険 Chill Creations - Joomla! 用 ccInvoices コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4853 2012-02-9 11:01 2011-10-5 Show GitHub Exploit DB Packet Storm
252216 7.5 危険 Netshine Software - Joomla! 用 nBill コンポーネントの netinvoice.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7302 2012-02-9 11:01 2008-06-27 Show GitHub Exploit DB Packet Storm
252217 7.5 危険 Sclek - jSite の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7301 2012-02-9 11:00 2011-10-5 Show GitHub Exploit DB Packet Storm
252218 8.5 危険 サン・マイクロシステムズ - Sun Solaris および OpenSolaris における MAC のポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7300 2012-02-9 10:59 2011-10-5 Show GitHub Exploit DB Packet Storm
252219 2.1 注意 Apache Software Foundation - Apache JServ における JDBC パスワードまたはその他の重要な情報を見つけられる脆弱性 CWE-16
環境設定
CVE-2000-1247 2012-02-9 10:58 2011-10-5 Show GitHub Exploit DB Packet Storm
252220 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1007 2012-02-8 16:35 2012-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246621 5.9 MEDIUM
Network
apache tika In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with an absolute path, s… CWE-22
Path Traversal
CVE-2018-11762 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246622 7.5 HIGH
Network
apache
oracle
tika
business_process_management_suite
In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service at… CWE-611
XXE
CVE-2018-11761 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246623 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to poten… CWE-20
 Improper Input Validation 
CVE-2018-11302 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246624 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing debug log event from firmware can lead to a… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2018-11301 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246625 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, callback executed from the other thread has freed memory which is also used in wlan functio… CWE-416
 Use After Free
CVE-2018-11300 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246626 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when WLAN FW has not filled the vdev id correctly in stats events then WLAN host driver tri… CWE-129
 Improper Validation of Array Index
CVE-2018-11299 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246627 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command HDD does not make sure that the realm st… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-11298 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246628 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validati… CWE-125
Out-of-bounds Read
CVE-2018-11297 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246629 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a message from firmware in WLAN handler, a buffer overwrite can occur. CWE-787
 Out-of-bounds Write
CVE-2018-11296 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm
246630 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed event data from the firmware to the host . If the length and an… CWE-787
 Out-of-bounds Write
CVE-2018-11295 2024-11-21 12:43 2018-09-19 Show GitHub Exploit DB Packet Storm