Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257131 6.4 警告 Opera Software ASA - Opera の JavaScript エンジンにおける同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4682 2011-12-9 16:03 2011-12-7 Show GitHub Exploit DB Packet Storm
257132 5 警告 Opera Software ASA - Opera における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4681 2011-12-9 16:03 2011-12-7 Show GitHub Exploit DB Packet Storm
257133 7.5 危険 Webmaster-Tips - Joomla! 用 webmaster-tips.net Flash Gallery コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4968 2011-12-9 14:45 2011-11-1 Show GitHub Exploit DB Packet Storm
257134 7.5 危険 BrotherScripts - BrotherScripts Business Directory の articlesdetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4969 2011-12-9 14:44 2011-11-1 Show GitHub Exploit DB Packet Storm
257135 7.5 危険 wikiwebhelp - Wiki Web Help の handlers/getpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4970 2011-12-9 14:44 2011-11-1 Show GitHub Exploit DB Packet Storm
257136 7.5 危険 YPNinc - YPNinc JokeScript の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4972 2011-12-9 14:43 2011-11-1 Show GitHub Exploit DB Packet Storm
257137 4.3 警告 Sourcefabric - Campsite の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4973 2011-12-9 14:43 2011-11-1 Show GitHub Exploit DB Packet Storm
257138 7.5 危険 BrotherScripts - Auto Dealer の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4974 2011-12-9 14:42 2011-11-1 Show GitHub Exploit DB Packet Storm
257139 7.5 危険 Techjoomla - Joomla! 用の Techjoomla SocialAds における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4975 2011-12-9 14:41 2011-11-1 Show GitHub Exploit DB Packet Storm
257140 4.3 警告 MetInfo - MetInfo の search/search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4976 2011-12-9 14:40 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278281 9.8 CRITICAL
Network
qualcomm mdm9206_firmware
mdm9607_firmware
fsm9055_firmware
ipq4019_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9645_firmware
mdm9650_firmware
ipq8064_firmware
msm8909w_firmware<…
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10436 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
278282 8.1 HIGH
Network
qualcomm mdm9206_firmware
mdm9625_firmware
mdm9635m_firmware
mdm9640_firmware
mdm9645_firmware
msm8909w_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_400_firmware
s…
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/S… CWE-362
Race Condition
CVE-2016-10435 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
278283 7.5 HIGH
Network
qualcomm sd_820_firmware
sd_820a_firmware
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB write response function is a buffer from HLO… CWE-287
Improper Authentication
CVE-2016-10434 2024-11-21 11:44 2018-04-18 Show GitHub Exploit DB Packet Storm
278284 7.5 HIGH
Network
brave brave_browser Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service. CWE-20
 Improper Input Validation 
CVE-2016-10718 2024-11-21 11:44 2018-04-4 Show GitHub Exploit DB Packet Storm
278285 7.8 HIGH
Local
malwarebytes malwarebytes_anti-malware A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting f… CWE-254
 7PK - Security Features
CVE-2016-10717 2024-11-21 11:44 2018-03-22 Show GitHub Exploit DB Packet Storm
278286 5.4 MEDIUM
Network
mail.ru calendar The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspa#period/month URI. CWE-79
Cross-site Scripting
CVE-2016-10716 2024-11-21 11:44 2018-03-16 Show GitHub Exploit DB Packet Storm
278287 5.4 MEDIUM
Network
artezio kanban_board The Artezio Kanban Board plugin 1.4 revision 1914 for Atlassian Jira has XSS via the Board Name in a Create New Board action, related to an artezioboard/mainPage.jspa?kanbanId=7#/kanban-view URI. CWE-79
Cross-site Scripting
CVE-2016-10715 2024-11-21 11:44 2018-03-16 Show GitHub Exploit DB Packet Storm
278288 9.8 CRITICAL
Network
zsh
canonical
zsh
ubuntu_linux
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters. CWE-189
Numeric Errors
CVE-2016-10714 2024-11-21 11:44 2018-02-28 Show GitHub Exploit DB Packet Storm
278289 5.5 MEDIUM
Local
gnu patch An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-10713 2024-11-21 11:44 2018-02-14 Show GitHub Exploit DB Packet Storm
278290 7.5 HIGH
Network
php
canonical
php
ubuntu_linux
In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For exa… CWE-20
 Improper Input Validation 
CVE-2016-10712 2024-11-21 11:44 2018-02-9 Show GitHub Exploit DB Packet Storm