Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257141	7.5	危険	Miniwork	-	Joomla! 用 Canteen コンポーネントの menu.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4977	2011-12-9 14:39	2011-11-1	Show	GitHub Exploit DB Packet Storm

257142	4.3	警告	Nicholas Berry	-	CANDID の image/view.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4978	2011-12-9 14:39	2011-11-1	Show	GitHub Exploit DB Packet Storm

257143	7.5	危険	Nicholas Berry	-	CANDID の image/view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4979	2011-12-9 14:38	2011-11-1	Show	GitHub Exploit DB Packet Storm

257144	7.5	危険	iScripts	-	iScripts ReserveLogic の packagedetails.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4980	2011-12-9 14:38	2011-11-1	Show	GitHub Exploit DB Packet Storm

257145	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Banner Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4981	2011-12-9 14:37	2011-11-1	Show	GitHub Exploit DB Packet Storm

257146	7.5	危険	My Kazaam	-	My Kazaam Address & Contact Organizer における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4982	2011-12-9 14:36	2011-11-1	Show	GitHub Exploit DB Packet Storm

257147	7.5	危険	iScripts	-	iScripts CyberMatch における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4983	2011-12-9 14:36	2011-11-1	Show	GitHub Exploit DB Packet Storm

257148	7.5	危険	My Kazaam	-	My Kazaam Notes Management System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4984	2011-12-9 14:35	2011-11-1	Show	GitHub Exploit DB Packet Storm

257149	4.3	警告	My Kazaam	-	My Kazaam Notes Management System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4985	2011-12-9 14:35	2011-11-1	Show	GitHub Exploit DB Packet Storm

257150	7.5	危険	Cafuego	-	Simple Document Management System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4986	2011-12-9 14:34	2011-11-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269741	7.8	HIGH Local	google	android	A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-0758	2024-11-21 12:03	2017-09-9	Show	GitHub Exploit DB Packet Storm

269742	7.8	HIGH Local	google	android	A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-0757	2024-11-21 12:03	2017-09-9	Show	GitHub Exploit DB Packet Storm

269743	7.8	HIGH Local	google	android	A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073.	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2017-0756	2024-11-21 12:03	2017-09-9	Show	GitHub Exploit DB Packet Storm

269744	7.8	HIGH Local	google	android	A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32178311.	NVD-CWE-noinfo	CVE-2017-0755	2024-11-21 12:03	2017-09-9	Show	GitHub Exploit DB Packet Storm

269745	7.8	HIGH Local	google	android	A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0. Android ID: A-62218744.	NVD-CWE-noinfo	CVE-2017-0753	2024-11-21 12:03	2017-09-9	Show	GitHub Exploit DB Packet Storm

269746	7.8	HIGH Local	google	android	A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-0752	2024-11-21 12:03	2017-09-9	Show	GitHub Exploit DB Packet Storm

269747	8.1	HIGH Network	rubygems debian canonical redhat	rubygems debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterp…	RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacke…	CWE-346 Origin Validation Error	CVE-2017-0902	2024-11-21 12:03	2017-09-1	Show	GitHub Exploit DB Packet Storm

269748	7.5	HIGH Network	rubygems debian canonical redhat	rubygems debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterp…	RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.	CWE-20 Improper Input Validation	CVE-2017-0901	2024-11-21 12:03	2017-09-1	Show	GitHub Exploit DB Packet Storm

269749	7.5	HIGH Network	rubygems debian redhat	rubygems debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_serve…	RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.	CWE-20 Improper Input Validation	CVE-2017-0900	2024-11-21 12:03	2017-09-1	Show	GitHub Exploit DB Packet Storm

269750	9.8	CRITICAL Network	rubygems debian redhat	rubygems debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_serve…	RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape seque…	CWE-94 Code Injection	CVE-2017-0899	2024-11-21 12:03	2017-09-1	Show	GitHub Exploit DB Packet Storm