Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250271 4.3 警告 jxtended
Joomla!
- Joomla の JXtended Comments コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4516 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250272 4.3 警告 シトリックス・システムズ - Citrix Web Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4515 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
250273 4.3 警告 DNN - DotNetNuke の Install/InstallWizard.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4514 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250274 4.3 警告 zimplit - Zimplit CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4513 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250275 7.2 危険 Cobbler project - Cobbler における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4512 2012-03-27 18:42 2010-04-23 Show GitHub Exploit DB Packet Storm
250276 10 危険 シックス・アパート株式会社 - Movable Type における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2010-4511 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250277 10 危険 シックス・アパート株式会社 - Movable Type における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2010-4509 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250278 10 危険 Mozilla Foundation - Mozilla Firefox の WebSockets 実装における脆弱性 CWE-noinfo
情報不足
CVE-2010-4508 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250279 9.3 危険 clear - ClearSpot の iSpot における管理者の認証をクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-4507 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
250280 6.8 警告 injader - Injader の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4505 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196291 8.8 HIGH
Adjacent
google android In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution… CWE-787
 Out-of-bounds Write
CVE-2021-0918 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196292 6.7 MEDIUM
Local
google android In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is … CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2021-0904 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196293 9.8 CRITICAL
Network
google android In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no additional execution privileges needed. User inte… NVD-CWE-noinfo
CVE-2021-0889 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196294 7.8 HIGH
Local
google android In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User in… NVD-CWE-Other
CVE-2021-0799 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196295 7.3 HIGH
Local
google android In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to local escalation of privilege with no additional exec… NVD-CWE-Other
CVE-2021-0769 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196296 5.5 MEDIUM
Local
google android In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions… CWE-281
 Improper Preservation of Permissions
CVE-2021-0704 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196297 7.8 HIGH
Local
google android In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera… CWE-787
 Out-of-bounds Write
CVE-2021-0675 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196298 5.5 MEDIUM
Local
google android In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosu… CWE-862
 Missing Authorization
CVE-2021-0653 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196299 6.5 MEDIUM
Network
google android In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privi… CWE-125
Out-of-bounds Read
CVE-2021-0650 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm
196300 7.8 HIGH
Local
google android In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution p… CWE-863
 Incorrect Authorization
CVE-2021-0649 2024-11-21 14:43 2021-12-16 Show GitHub Exploit DB Packet Storm