Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227511 4.3 警告 SmarterTools Inc. - SmarterTools SmarterTrack の frmTickets.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4995 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227512 4.3 警告 SmarterTools Inc. - SmarterTools SmarterTrack の frmKBSearch.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4994 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227513 7.5 危険 script-shop24 - LM Starmail Paidmail の home.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4993 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227514 7.5 危険 script-shop24 - LM Starmail Paidmail の paidbanner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4992 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227515 10 危険 SAP - SAP Business One の NT_Naming_Service.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4988 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227516 7.5 危険 scripteen - Scripteen Free Image Hosting Script の admin/header.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4987 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227517 7.5 危険 websitesrus - Accessories Me PHP Affiliate Script の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4985 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227518 4.3 警告 websitesrus - Accessories Me PHP Affiliate Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4984 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227519 4.3 警告 snowhall - Silurus Classifieds におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4983 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
227520 5 警告 tufat - MyBackup の down.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4978 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221441 9.8 CRITICAL
Network 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
msm8909w_firmware
msm8996au_firmware
qcs605_firmware
qm215_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd… 		Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Comput… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2019-2244 2024-11-21 13:40 2019-05-25 Show GitHub Exploit DB Packet Storm
221442 7.8 HIGH
Local 		google
canonical 		android
ubuntu_linux 		In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege wi… NVD-CWE-noinfo
CVE-2019-2054 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221443 5.5 MEDIUM
Local 		google android In wnm_parse_neighbor_report_elem of wnm_sta.c, there is a possible out-of-bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privil… CWE-125
Out-of-bounds Read 		CVE-2019-2053 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221444 7.5 HIGH
Network 		google android In VisitPointers of heap.cc, there is a possible out-of-bounds read due to type confusion. This could lead to remote information disclosure with no additional execution privileges needed. User intera… CWE-125
CWE-843
Out-of-bounds Read
Type Confusion 		CVE-2019-2052 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221445 7.5 HIGH
Network 		google android In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure when processing a proxy auto config file with no additio… CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read 		CVE-2019-2051 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221446 7.8 HIGH
Local 		google android In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privilege… CWE-416
CWE-667
 Use After Free
 Improper Locking 		CVE-2019-2050 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221447 7.8 HIGH
Local 		google android In SendMediaUpdate and SendFolderUpdate of avrcp_service.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service w… CWE-787
CWE-416
 Out-of-bounds Write
 Use After Free 		CVE-2019-2049 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221448 9.8 CRITICAL
Network 		google android In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config with no additional execution privileges… CWE-787
CWE-843
 Out-of-bounds Write
Type Confusion 		CVE-2019-2047 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221449 9.8 CRITICAL
Network 		google android In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution in the proxy auto-config with no additi… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-2046 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm
221450 9.8 CRITICAL
Network 		google android In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config with no additional execution privileges… CWE-787
 Out-of-bounds Write 		CVE-2019-2045 2024-11-21 13:40 2019-05-9 Show GitHub Exploit DB Packet Storm