Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250431 4.3 警告 JAKCMS - JAKCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4563 2011-11-30 16:27 2011-09-22 Show GitHub Exploit DB Packet Storm
250432 4.3 警告 Phorum - Phorum の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4561 2011-11-30 16:24 2011-11-28 Show GitHub Exploit DB Packet Storm
250433 3.5 注意 Drupal - Drupal の Petition Node モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4560 2011-11-30 16:23 2011-10-5 Show GitHub Exploit DB Packet Storm
250434 7.5 危険 Vtiger - vTiger CRM の Calendar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4559 2011-11-30 16:22 2011-11-28 Show GitHub Exploit DB Packet Storm
250435 4.3 警告 Contao - Contao におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4335 2011-11-29 16:28 2011-11-28 Show GitHub Exploit DB Packet Storm
250436 4.3 警告 Dolibarr ERP & CRM - Dolibarr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4329 2011-11-29 16:27 2011-11-8 Show GitHub Exploit DB Packet Storm
250437 4.3 警告 Ruby on Rails project - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4319 2011-11-29 16:26 2011-11-28 Show GitHub Exploit DB Packet Storm
250438 4.3 警告 Combodo - Combodo iTop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4275 2011-11-29 16:23 2011-11-26 Show GitHub Exploit DB Packet Storm
250439 9.3 危険 SunPlus Electronics - DVR Remote ActiveX コントロールの DVRemoteAx.ax における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3828 2011-11-29 16:22 2011-11-26 Show GitHub Exploit DB Packet Storm
250440 6.8 警告 IBM - IBM TS3100 および TS3200 テープ・ライブラリにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-1372 2011-11-29 16:15 2011-11-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213481 5.5 MEDIUM
Local 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is… CWE-125
Out-of-bounds Read 		CVE-2019-9287 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213482 7.5 HIGH
Network 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i… CWE-125
Out-of-bounds Read 		CVE-2019-9286 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213483 7.5 HIGH
Network 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not… CWE-125
Out-of-bounds Read 		CVE-2019-9285 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213484 7.5 HIGH
Network 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure, with no additional privileges required. User interaction is not n… CWE-125
Out-of-bounds Read 		CVE-2019-9284 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213485 6.5 MEDIUM
Network 		google android In AAC Codec, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is… CWE-20
 Improper Input Validation  		CVE-2019-9283 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213486 6.5 MEDIUM
Network 		google android In skia, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is nee… CWE-125
Out-of-bounds Read 		CVE-2019-9282 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213487 7.5 HIGH
Network 		google android In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user interaction requirements with no additional execution privileg… CWE-22
Path Traversal 		CVE-2019-9281 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213488 3.3 LOW
Local 		google android In keyguard, there is a possible escalation of privilege due to improper permission checks. This could lead to a local bypass of the keyguard under limited circumstances, with User execution privileg… NVD-CWE-noinfo
CVE-2019-9280 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213489 7.5 HIGH
Network 		google android In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User … CWE-476
 NULL Pointer Dereference 		CVE-2019-9279 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm
213490 8.8 HIGH
Network 		google
opensuse
fedoraproject
debian
canonical 		android
leap
fedora
debian_linux
ubuntu_linux 		In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-9278 2024-11-21 13:51 2019-09-28 Show GitHub Exploit DB Packet Storm