Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257431 4.3 警告 Google - Google Chrome における data: URI をブロックしない脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3011 2010-10-19 14:59 2009-02-3 Show GitHub Exploit DB Packet Storm
257432 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2974 2010-10-19 14:59 2009-02-3 Show GitHub Exploit DB Packet Storm
257433 6.4 警告 Google - Google Chrome における任意の HTTPS サーバになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2973 2010-10-19 14:59 2009-08-25 Show GitHub Exploit DB Packet Storm
257434 10 危険 Google - Google Chrome にて使用される Google V8 における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2935 2010-10-19 14:58 2009-08-25 Show GitHub Exploit DB Packet Storm
257435 4.3 警告 Google - Google Chrome の tooltip manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7061 2010-10-19 14:58 2009-08-24 Show GitHub Exploit DB Packet Storm
257436 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2955 2010-10-19 14:58 2009-08-24 Show GitHub Exploit DB Packet Storm
257437 5.8 警告 Google - Google Chrome における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2060 2010-10-19 14:57 2009-03-23 Show GitHub Exploit DB Packet Storm
257438 9.3 危険 Google - Google Chrome の chrome/common/gfx/url_elider.cc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6998 2010-10-19 14:57 2009-08-19 Show GitHub Exploit DB Packet Storm
257439 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-6997 2010-10-19 14:57 2009-08-19 Show GitHub Exploit DB Packet Storm
257440 5 警告 Google - Google Chrome BETA におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-6996 2010-10-19 14:56 2009-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268891 4.3 MEDIUM
Adjacent 		nutspace nut_mobile The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute. CWE-287
Improper Authentication 		CVE-2016-6549 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268892 9.8 CRITICAL
Network 		nutspace nut_mobile The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th… CWE-200
Information Exposure 		CVE-2016-6548 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268893 7.8 HIGH
Local 		nutspace nut_mobile The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-6547 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268894 7.8 HIGH
Local 		kkmcn itrackeasy The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl… CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-6546 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268895 9.8 CRITICAL
Network 		ieasytec itrackeasy Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this … CWE-384
 Session Fixation 		CVE-2016-6545 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268896 7.5 HIGH
Network 		ieasytec itrack_easy getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device. CWE-287
Improper Authentication 		CVE-2016-6544 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268897 5.9 MEDIUM
Network 		ieasytec itrack_easy A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device. CWE-284
Improper Access Control 		CVE-2016-6543 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268898 3.7 LOW
Network 		ieasytec itrackeasy The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address. CWE-20
 Improper Input Validation  		CVE-2016-6542 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268899 9.8 CRITICAL
Network 		shdesigns resident_download_manager SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applica… CWE-20
 Improper Input Validation  		CVE-2016-6567 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
268900 8.1 HIGH
Network 		infinixauthority
bluproducts
xolo
beeline
iku-mobile
leagoo
doogee 		hot_x507_firmware
hot_2_x510_firmware
zero_x506_firmware
zero_2_x509_firmware
studio_g_firmware
studio_g_plus_firmware
studio_6.0_hd_firmware
studio_x_firmware
studio_x_plus_f… 		Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this bina… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6564 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm