Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253831	2.1	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP における同じ Web サーバ上でホストされた別サイトの振る舞いを変更される脆弱性	CWE-134 書式文字列の問題	CVE-2009-0754	2010-10-19 15:17	2009-03-3	Show	GitHub Exploit DB Packet Storm

253832	5	警告	The PHP Group アップルターボリナックスレッドハット	-	PHP の JSON_parser 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-1271	2010-10-19 15:16	2009-04-8	Show	GitHub Exploit DB Packet Storm

253833	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2008-1808	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

253834	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるメモリ破壊の脆弱性	CWE-189 数値処理の問題	CVE-2008-1807	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

253835	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるヒープベースのバッファオーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-1806	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

253836	2.6	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5814	2010-10-19 15:14	2008-12-19	Show	GitHub Exploit DB Packet Storm

253837	9.3	危険	Google	-	Google Chrome の Gears プラグインにおける任意のコードを実行される脆弱性	CWE-Other その他	CVE-2009-3932	2010-10-19 15:02	2009-11-5	Show	GitHub Exploit DB Packet Storm

253838	4.3	警告	Google	-	Google Chrome の src/webkit/glue/webframeloaderclient_impl.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3934	2010-10-19 15:02	2009-11-5	Show	GitHub Exploit DB Packet Storm

253839	9.3	危険	Google	-	Google Chrome のブラックリストにおける危険なファイルのダウンロードを強制される脆弱性	CWE-20 不適切な入力確認	CVE-2009-3931	2010-10-19 15:01	2009-11-5	Show	GitHub Exploit DB Packet Storm

253840	7.5	危険	Google	-	Google Chrome における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3456	2010-10-19 15:01	2009-09-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258361	7.8	HIGH Local	google	android	A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issu…	CWE-787 Out-of-bounds Write	CVE-2017-0638	2024-11-21 12:03	2017-06-14	Show	GitHub Exploit DB Packet Storm

258362	7.8	HIGH Local	google	android	A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-0637	2024-11-21 12:03	2017-06-14	Show	GitHub Exploit DB Packet Storm

258363	7.0	HIGH Local	google	android	An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated…	NVD-CWE-noinfo	CVE-2017-0636	2024-11-21 12:03	2017-06-14	Show	GitHub Exploit DB Packet Storm

258364	6.5	MEDIUM Network	zulip	zulip_server	Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite ot…	CWE-862 Missing Authorization	CVE-2017-0896	2024-11-21 12:03	2017-06-3	Show	GitHub Exploit DB Packet Storm

258365	5.5	MEDIUM Local	google	android	A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rat…	CWE-476 NULL Pointer Dereference	CVE-2017-0635	2024-11-21 12:03	2017-05-13	Show	GitHub Exploit DB Packet Storm

258366	4.7	MEDIUM Local	linux	linux_kernel	An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate…	CWE-200 Information Exposure	CVE-2017-0634	2024-11-21 12:03	2017-05-13	Show	GitHub Exploit DB Packet Storm

258367	4.7	MEDIUM Local	linux	linux_kernel	An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access data outside of its permission levels. This issue is rated as Moderate because …	CWE-200 Information Exposure	CVE-2017-0633	2024-11-21 12:03	2017-05-13	Show	GitHub Exploit DB Packet Storm

258368	4.7	MEDIUM Local	linux	linux_kernel	An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate …	CWE-200 Information Exposure	CVE-2017-0632	2024-11-21 12:03	2017-05-13	Show	GitHub Exploit DB Packet Storm

258369	4.7	MEDIUM Local	linux	linux_kernel	An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate becau…	CWE-200 Information Exposure	CVE-2017-0631	2024-11-21 12:03	2017-05-13	Show	GitHub Exploit DB Packet Storm

258370	4.7	MEDIUM Local	linux	linux_kernel	An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate becau…	CWE-200 Information Exposure	CVE-2017-0630	2024-11-21 12:03	2017-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed