Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254691 4 警告 バッファロー - 複数のバッファロー社製ルータにおけるクロスサイト・リクエスト・フォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1324 2011-05-10 10:55 2011-04-19 Show GitHub Exploit DB Packet Storm
254692 6.8 警告 Mutt
オラクル
- mutt の mutt_ssl.c における SSH サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2009-3765 2011-05-10 10:49 2009-10-23 Show GitHub Exploit DB Packet Storm
254693 9.3 危険 オラクル
Erik de Castro Lopo
Nullsoft
- Winamp などで利用される libsndfile の aiff_read_header におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1791 2011-05-10 10:49 2009-05-26 Show GitHub Exploit DB Packet Storm
254694 9.3 危険 オラクル
Erik de Castro Lopo
Nullsoft
- Winamp などで利用される libsndfile の voc_read_header におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1788 2011-05-10 10:48 2009-05-26 Show GitHub Exploit DB Packet Storm
254695 9.3 危険 オラクル
Erik de Castro Lopo
Nullsoft
- Winamp などで利用される libsndfile における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-0186 2011-05-10 10:47 2009-03-5 Show GitHub Exploit DB Packet Storm
254696 - - アップル - Apple Mac OS X における脆弱性に対するアップデート - - 2011-05-10 10:46 2011-04-15 Show GitHub Exploit DB Packet Storm
254697 10 危険 BlackBerry
アップル
Google
- WebKit における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2011-1290 2011-05-10 10:43 2011-03-11 Show GitHub Exploit DB Packet Storm
254698 10 危険 MIT Kerberos
レッドハット
- MIT Kerberos 5 の process_chpw_request 関数における任意のコードを実行される脆弱性 CWE-20
CWE-Other
CVE-2011-0285 2011-05-10 10:40 2011-04-14 Show GitHub Exploit DB Packet Storm
254699 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の rvrender.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-1525 2011-05-10 10:38 2011-04-6 Show GitHub Exploit DB Packet Storm
254700 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の OpenURLInDefaultBrowser メソッドにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2011-1426 2011-05-10 10:38 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246691 7.7 HIGH
Local
qualcomm mdm9206_firmware
mdm9607_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9650_firmware
mdm9655_firmware
msm8909w_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware<…
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-11259 2024-11-21 12:43 2018-07-7 Show GitHub Exploit DB Packet Storm
246692 7.8 HIGH
Local
qualcomm sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_845_firmware
sd_850_firmware
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850. NVD-CWE-noinfo
CVE-2018-11257 2024-11-21 12:43 2018-07-7 Show GitHub Exploit DB Packet Storm
246693 7.8 HIGH
Local
qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
msm8909w_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_425_firmware
sd_450_firmware
s…
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD … CWE-416
 Use After Free
CVE-2018-11258 2024-11-21 12:43 2018-07-7 Show GitHub Exploit DB Packet Storm
246694 7.5 HIGH
Network
atlant atlant ATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. CWE-190
 Integer Overflow or Wraparound
CVE-2018-11429 2024-11-21 12:43 2018-07-4 Show GitHub Exploit DB Packet Storm
246695 7.5 HIGH
Network
genesis_vision gvtoken GVToken Genesis Vision (GVT) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. CWE-190
 Integer Overflow or Wraparound
CVE-2018-11335 2024-11-21 12:43 2018-07-4 Show GitHub Exploit DB Packet Storm
246696 8.8 HIGH
Network
dialogic powermedia_xms SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to execute arbitrary SQL commands via the filterPattern parameter. CWE-89
SQL Injection
CVE-2018-11643 2024-11-21 12:43 2018-07-4 Show GitHub Exploit DB Packet Storm
246697 7.8 HIGH
Local
dialogic powermedia_xms Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-11642 2024-11-21 12:43 2018-07-4 Show GitHub Exploit DB Packet Storm
246698 9.8 CRITICAL
Network
dialogic powermedia_xms Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a we… CWE-798
 Use of Hard-coded Credentials
CVE-2018-11641 2024-11-21 12:43 2018-07-4 Show GitHub Exploit DB Packet Storm
246699 9.1 CRITICAL
Network
dialogic powermedia_xms XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption… CWE-611
XXE
CVE-2018-11640 2024-11-21 12:43 2018-07-4 Show GitHub Exploit DB Packet Storm
246700 8.1 HIGH
Network
dialogic powermedia_xms Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers t… CWE-522
 Insufficiently Protected Credentials
CVE-2018-11639 2024-11-21 12:43 2018-07-4 Show GitHub Exploit DB Packet Storm