Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4211 6.7 警告
Local 		Google Android GoogleのAndroidにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-20414 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
4212 5.5 警告
Local 		Google Android GoogleのAndroidにおける複数の脆弱性 CWE-415
CWE-667
CVE-2026-20415 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
4213 5.3 警告
Local 		Google Android GoogleのAndroidにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-20417 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
4214 7.5 重要
Network 		OpenWrt Project
メディアテック		 Software Development Kit
openwrt
nbiot sdk 		メディアテック等の複数ベンダの製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-20419 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
4215 7.5 重要
Network 		メディアテック nr16
nr17
NR15
NR17R 		メディアテックのNR15等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-20420 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
4216 7.5 重要
Network 		メディアテック NR15 メディアテックのNR15における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-20421 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
4217 7.5 重要
Network 		メディアテック nr16
nr17
NR15
NR17R 		メディアテックのNR15等の複数製品における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-20422 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
4218 5.1 警告
Local 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chrome ベース) のセキュリティ機能のバイパスの脆弱性 CWE-269
不適切な権限管理 		CVE-2026-21223 2026-02-5 15:44 2026-01-16 Show GitHub Exploit DB Packet Storm
4219 9.8 緊急
Network 		マイクロソフト Azure Logic Apps Azure Logic Apps Elevation of Privilege Vulnerability CWE-22
パス・トラバーサル 		CVE-2026-21227 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
4220 6.1 警告
Network 		マイクロソフト Microsoft Account Microsoft Account Spoofing Vulnerability CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21264 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348851 - johnmccollum com_advertising Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (… CWE-22
Path Traversal 		CVE-2010-1473 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348852 - alphaplug com_alphauserpoints Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact v… CWE-22
Path Traversal 		CVE-2010-1476 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348853 - martin_hess com_sermonspeaker SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latest_serm… CWE-89
SQL Injection 		CVE-2010-1477 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348854 - ternaria com_jfeedback Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other … CWE-22
Path Traversal 		CVE-2010-1478 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348855 - rockettheme com_rokmodule SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.ph… CWE-89
SQL Injection 		CVE-2010-1479 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348856 - pligg pligg_cms Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of administrators for requests that create user accounts or have u… CWE-352
 Origin Validation Error 		CVE-2009-4787 2010-06-11 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
348857 - shape5 bridge_of_hope_template SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php. CWE-89
SQL Injection 		CVE-2010-2254 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
348858 - tamlyncreative com_bfsurvey_profree
com_bfsurvey_pro
com_bfsurvey_basic 		SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) component 1.2.6, and BF Survey Basic component before 1.2 for Joo… CWE-89
SQL Injection 		CVE-2010-2255 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
348859 - payperviewvideosoftware pay_per_minute_video_chat_script Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/mem… CWE-79
Cross-site Scripting 		CVE-2010-2256 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
348860 - payperviewvideosoftware pay_per_minute_video_chat_script SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. CWE-89
SQL Injection 		CVE-2010-2257 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm