Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228451 10 危険 PHP Enter - PHP Enter の admin/banners.php における horad.php への任意の PHP コード を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-6046 2012-11-28 14:57 2012-11-27 Show GitHub Exploit DB Packet Storm
228452 4.3 警告 ramui.com - Ramui Forum の gb/user/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6045 2012-11-28 14:56 2012-11-27 Show GitHub Exploit DB Packet Storm
228453 10 危険 Joobi - Joomla! 用 Jstore コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-5286 2012-11-28 14:55 2012-11-26 Show GitHub Exploit DB Packet Storm
228454 6.8 警告 Open Dynamics - Collabtive の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-5285 2012-11-28 14:32 2012-11-26 Show GitHub Exploit DB Packet Storm
228455 4.3 警告 Open Dynamics - Collabtive におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5284 2012-11-28 14:31 2012-11-26 Show GitHub Exploit DB Packet Storm
228456 6.8 警告 OpenText - OpenText ECM におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-5283 2012-11-28 14:30 2012-11-26 Show GitHub Exploit DB Packet Storm
228457 4.3 警告 OpenText - OpenText ECM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5282 2012-11-28 14:29 2012-11-26 Show GitHub Exploit DB Packet Storm
228458 6.8 警告 net4visions - IBrowser TinyMCE プラグインの CMScout 内の ibrowser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-5281 2012-11-28 14:27 2012-11-26 Show GitHub Exploit DB Packet Storm
228459 7.5 危険 Joomla-CBE - Joomla! 用 CBE コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-5280 2012-11-28 14:26 2012-11-26 Show GitHub Exploit DB Packet Storm
228460 4.3 警告 Matthew James - M-Player におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-6044 2012-11-28 14:23 2012-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197851 7.8 HIGH
Local
google android In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escalation of privilege if mPayload in writeTo… CWE-20
 Improper Input Validation 
CVE-2017-13287 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197852 7.8 HIGH
Local
google android In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local escalation of privilege where the user can st… CWE-502
 Deserialization of Untrusted Data
CVE-2017-13286 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197853 9.8 CRITICAL
Network
google android In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote code execution in an unprivileged process… CWE-787
 Out-of-bounds Write
CVE-2017-13285 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197854 9.8 CRITICAL
Network
google android In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additi… CWE-20
 Improper Input Validation 
CVE-2017-13284 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197855 9.8 CRITICAL
Network
google android In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional e… CWE-787
 Out-of-bounds Write
CVE-2017-13283 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197856 9.8 CRITICAL
Network
google android In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privile… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-13282 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197857 9.8 CRITICAL
Network
google android In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privile… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-13281 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197858 7.5 HIGH
Network
google android In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional… CWE-125
Out-of-bounds Read
CVE-2017-13280 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197859 5.5 MEDIUM
Local
google android In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote denial of service with no additional executio… CWE-834
 Excessive Iteration
CVE-2017-13279 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm
197860 7.8 HIGH
Local
google android In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. U… CWE-416
 Use After Free
CVE-2017-13278 2024-11-21 12:11 2018-04-5 Show GitHub Exploit DB Packet Storm