Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250001	6.8	警告	John Bradshaw	-	Nucleus 用 NP_Gallery プラグインにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-5040	2011-12-9 13:39	2011-11-2	Show	GitHub Exploit DB Packet Storm

250002	7.5	危険	John Bradshaw	-	Nucleus 用 NP_Gallery プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5041	2011-12-9 13:38	2011-11-2	Show	GitHub Exploit DB Packet Storm

250003	4.3	警告	Blue Constant Media Ltd	-	Joomla! 用 DJ-ArtGallery コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5042	2011-12-9 13:38	2011-11-2	Show	GitHub Exploit DB Packet Storm

250004	6	警告	Blue Constant Media Ltd	-	Joomla! 用 DJ-ArtGallery コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5043	2011-12-9 13:34	2011-11-2	Show	GitHub Exploit DB Packet Storm

250005	6	警告	Kanich	-	Joomla! 用 Search Log コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5044	2011-12-9 13:33	2011-11-2	Show	GitHub Exploit DB Packet Storm

250006	4.3	警告	Sell@Site	-	Smart ASP Survey におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5045	2011-12-9 13:32	2011-11-2	Show	GitHub Exploit DB Packet Storm

250007	5.1	警告	FFFTPプロジェクト	-	FFFTP における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-4266	2011-12-9 12:02	2011-12-9	Show	GitHub Exploit DB Packet Storm

250008	5	警告	CA Technologies	-	CA ARCserve D2D の BaseServiceImpl.class における資格情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3011	2011-12-9 10:15	2011-08-9	Show	GitHub Exploit DB Packet Storm

250009	4.3	警告	Vtiger	-	vTiger CRM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4670	2011-12-8 12:30	2011-12-2	Show	GitHub Exploit DB Packet Storm

250010	2.6	注意	Namazu Project	-	Namazu におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4345	2011-12-8 12:26	2011-11-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212151	7.8	HIGH Local	google	android	In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe…	CWE-787 Out-of-bounds Write	CVE-2020-0094	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212152	5.0	MEDIUM Local	google debian canonical libexif_project opensuse	android debian_linux ubuntu_linux libexif leap	In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privile…	CWE-125 Out-of-bounds Read	CVE-2020-0093	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212153	5.0	MEDIUM Local	google	android	In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosur…	CWE-200 Information Exposure	CVE-2020-0092	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212154	5.5	MEDIUM Local	google	android	In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700	NVD-CWE-noinfo	CVE-2020-0091	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212155	5.5	MEDIUM Local	google	android	An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048	NVD-CWE-noinfo	CVE-2020-0090	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212156	5.5	MEDIUM Local	google	android	An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448	NVD-CWE-noinfo	CVE-2020-0065	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212157	5.5	MEDIUM Local	google	android	An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855	NVD-CWE-noinfo	CVE-2020-0064	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212158	7.8	HIGH Local	google	android	In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execut…	CWE-276 Incorrect Default Permissions	CVE-2020-0024	2024-11-21 13:52	2020-05-15	Show	GitHub Exploit DB Packet Storm

212159	8.1	HIGH Network	dahuasecurity	sd6al_firmware sd5a_firmware sd1a_firmware ptz1a_firmware sd50_firmware sd52c_firmware ipc-hx5842h_firmware ipc-hx7842h_firmware ipc-hx2xxx_firmware ipc-hxxx5x4x_firmware	Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak securi…	CWE-276 Incorrect Default Permissions	CVE-2019-9682	2024-11-21 13:52	2020-05-14	Show	GitHub Exploit DB Packet Storm

212160	7.8	HIGH Local	google	android	In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server …	CWE-502 Deserialization of Untrusted Data	CVE-2020-0082	2024-11-21 13:52	2020-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed