Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254771 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
254772 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
254773 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
254774 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
254775 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250941 7.5 HIGH
Network 		google rendertron Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote… NVD-CWE-noinfo
CVE-2017-18353 2024-11-21 12:19 2018-12-17 Show GitHub Exploit DB Packet Storm
250942 6.1 MEDIUM
Network 		google rendertron Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs. CWE-79
Cross-site Scripting 		CVE-2017-18352 2024-11-21 12:19 2018-12-17 Show GitHub Exploit DB Packet Storm
250943 9.8 CRITICAL
Network 		qualcomm msm8996au_firmware
sd_410_firmware
sd_412_firmware
sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_625_firmware
sd_650_firmware
sd_652_firmware
sd_810_firmware
sd_820… 		Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A. CWE-20
 Improper Input Validation  		CVE-2017-18318 2024-11-21 12:19 2018-11-29 Show GitHub Exploit DB Packet Storm
250944 7.8 HIGH
Local 		qualcomm msm8996au_firmware
sd_410_firmware
sd_412_firmware
sd_820_firmware
sd_820a_firmware 		Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996… CWE-20
 Improper Input Validation  		CVE-2017-18317 2024-11-21 12:19 2018-11-29 Show GitHub Exploit DB Packet Storm
250945 7.8 HIGH
Local 		qualcomm sd_600_firmware Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600. CWE-125
Out-of-bounds Read 		CVE-2017-18315 2024-11-21 12:19 2018-11-29 Show GitHub Exploit DB Packet Storm
250946 7.8 HIGH
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_425_firmware
sd_430_firmware
sd_450_firmware
sd_… 		Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210… NVD-CWE-noinfo
CVE-2017-18316 2024-11-21 12:19 2018-11-29 Show GitHub Exploit DB Packet Storm
250947 5.5 MEDIUM
Local 		google android A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel CWE-125
Out-of-bounds Read 		CVE-2017-18281 2024-11-21 12:19 2018-10-30 Show GitHub Exploit DB Packet Storm
250948 7.1 HIGH
Local 		qualcomm sd_845_firmware
sd_850_firmware 		A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850. CWE-129
 Improper Validation of Array Index 		CVE-2017-18309 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm
250949 7.8 HIGH
Local 		qualcomm mdm9607_firmware
msm8909w_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_425_firmware
sd_430_firmware 		Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430 NVD-CWE-noinfo
CVE-2017-18308 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm
250950 7.8 HIGH
Local 		qualcomm mdm9607_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9645_firmware
mdm9650_firmware
mdm9655_firmware
msm8909w_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware<… 		XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Sna… NVD-CWE-noinfo
CVE-2017-18311 2024-11-21 12:19 2018-10-26 Show GitHub Exploit DB Packet Storm