Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254101 9.3 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1288 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
254102 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1287 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
254103 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1286 2010-06-1 15:44 2010-05-11 Show GitHub Exploit DB Packet Storm
254104 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1284 2010-06-1 15:44 2010-05-11 Show GitHub Exploit DB Packet Storm
254105 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1283 2010-06-1 15:44 2010-05-11 Show GitHub Exploit DB Packet Storm
254106 4.3 警告 レッドハット
Glyph & Cog, LLC
ターボリナックス
サイバートラスト株式会社
CUPS		 - Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0166 2010-06-1 12:01 2009-04-16 Show GitHub Exploit DB Packet Storm
254107 4.3 警告 Glyph & Cog, LLC
アップル
サイバートラスト株式会社
CUPS
ターボリナックス
レッドハット		 - Xpdf および CUPS の JBIG2 デコーダーにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0147 2010-06-1 12:01 2009-04-16 Show GitHub Exploit DB Packet Storm
254108 4.3 警告 Glyph & Cog, LLC
アップル
サイバートラスト株式会社
CUPS
ターボリナックス
レッドハット		 - Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-0146 2010-06-1 12:01 2009-04-16 Show GitHub Exploit DB Packet Storm
254109 4.3 警告 アドビシステムズ - Adobe Shockwave Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1282 2010-05-31 18:27 2010-05-11 Show GitHub Exploit DB Packet Storm
254110 9.3 危険 アドビシステムズ - Adobe Shockwave Player の iml32.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1281 2010-05-31 18:26 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251381 7.8 HIGH
Local 		qualcomm sd_600_firmware Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600. CWE-125
Out-of-bounds Read 		CVE-2017-18315 2024-11-21 12:19 2018-11-29 Show GitHub Exploit DB Packet Storm
251382 7.8 HIGH
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_… 		Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210… NVD-CWE-noinfo
CVE-2017-18316 2024-11-21 12:19 2018-11-29 Show GitHub Exploit DB Packet Storm
251383 5.5 MEDIUM
Local 		google android A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel CWE-125
Out-of-bounds Read 		CVE-2017-18281 2024-11-21 12:19 2018-10-30 Show GitHub Exploit DB Packet Storm
251384 7.1 HIGH
Local 		qualcomm sd_845_firmware
sd_850_firmware 		A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850. CWE-129
 Improper Validation of Array Index 		CVE-2017-18309 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm
251385 7.8 HIGH
Local 		qualcomm mdm9607_firmware
msm8909w_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_425_firmware
sd_430_firmware 		Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430 NVD-CWE-noinfo
CVE-2017-18308 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm
251386 7.8 HIGH
Local 		qualcomm mdm9607_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9645_firmware
mdm9650_firmware
mdm9655_firmware
msm8909w_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware<… 		XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Sna… NVD-CWE-noinfo
CVE-2017-18311 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm
251387 7.8 HIGH
Local 		qualcomm msm8909w_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_425_firmware
sd_427_firmware
sd_430_firmware
sd_4… 		ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, S… NVD-CWE-noinfo
CVE-2017-18310 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm
251388 7.8 HIGH
Local 		qualcomm fsm9055_firmware
ipq4019_firmware
mdm9206_firmware
mdm9607_firmware
mdm9625_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9645_firmware
mdm9650_firmware
mdm9655_firmware 		During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-18124 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm
251389 9.8 CRITICAL
Network 		pippo
alibaba 		pippo
fastjson 		parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a… CWE-20
 Improper Input Validation  		CVE-2017-18349 2024-11-21 12:19 2018-10-24 Show GitHub Exploit DB Packet Storm
251390 7.8 HIGH
Local 		qualcomm msm8996au_firmware
sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_810_firmware
sd_820_firmware
sd_820a_firmware 		While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdrago… CWE-862
 Missing Authorization 		CVE-2017-18312 2024-11-21 12:19 2018-10-23 Show GitHub Exploit DB Packet Storm