Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257421 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257422 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257423 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257424 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257425 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
257426 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
257427 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246501 7.8 HIGH
Local 		google android In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corru… CWE-787
 Out-of-bounds Write 		CVE-2018-12010 2024-11-21 12:44 2019-02-12 Show GitHub Exploit DB Packet Storm
246502 5.5 MEDIUM
Local 		google android In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Users with no extra privileges can potentially access leaked data due to uninitialized paddi… CWE-200
Information Exposure 		CVE-2018-12006 2024-11-21 12:44 2019-02-12 Show GitHub Exploit DB Packet Storm
246503 7.8 HIGH
Local 		google android In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-free issue in heap while loading audio effects config in audio effects factory. CWE-416
 Use After Free 		CVE-2018-11962 2024-11-21 12:44 2019-02-12 Show GitHub Exploit DB Packet Storm
246504 7.8 HIGH
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_425_firmware
sd_427_firmware
sd… 		While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag… CWE-129
 Improper Validation of Array Index 		CVE-2018-11899 2024-11-21 12:44 2019-02-12 Show GitHub Exploit DB Packet Storm
246505 7.8 HIGH
Local 		qualcomm mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_425_firmware
sd_… 		Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron… CWE-862
 Missing Authorization 		CVE-2018-11888 2024-11-21 12:44 2019-02-12 Show GitHub Exploit DB Packet Storm
246506 7.8 HIGH
Local 		qualcomm mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_636_firmware
sd_… 		If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… CWE-190
 Integer Overflow or Wraparound 		CVE-2018-11855 2024-11-21 12:44 2019-02-12 Show GitHub Exploit DB Packet Storm
246507 7.8 HIGH
Local 		qualcomm ipq8074_firmware
mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
msm8909w_firmware
msm8996au_firmware
qca8081_firmware
sd_210_firmware
sd_212_firmware 		Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snap… CWE-20
 Improper Input Validation  		CVE-2018-11847 2024-11-21 12:44 2019-02-12 Show GitHub Exploit DB Packet Storm
246508 7.5 HIGH
Network 		apache
canonical 		subversion
ubuntu_linux 		Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory li… CWE-824
 Access of Uninitialized Pointer 		CVE-2018-11803 2024-11-21 12:44 2019-02-6 Show GitHub Exploit DB Packet Storm
246509 7.8 HIGH
Local 		apache
canonical 		openoffice
ubuntu_linux 		When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic … CWE-682
 Incorrect Calculation 		CVE-2018-11790 2024-11-21 12:44 2019-02-1 Show GitHub Exploit DB Packet Storm
246510 7.2 HIGH
Network 		symantec reporter The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access c… CWE-78
OS Command  		CVE-2018-12237 2024-11-21 12:44 2019-01-25 Show GitHub Exploit DB Packet Storm