Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251361	7.5	危険	Maulana Al Matien	-	ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4998	2011-12-9 14:18	2011-11-2	Show	GitHub Exploit DB Packet Storm

251362	7.5	危険	Joe Pieruccini	-	MCLogin System の login/login_index.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5000	2011-12-9 14:17	2011-11-2	Show	GitHub Exploit DB Packet Storm

251363	7.5	危険	2daybiz	-	2daybiz Polls Script の searchvote.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5004	2011-12-9 14:16	2011-11-2	Show	GitHub Exploit DB Packet Storm

251364	4.3	警告	Rayzz	-	Rayzz Photoz の members/profileCommentsResponse.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5005	2011-12-9 14:15	2011-11-2	Show	GitHub Exploit DB Packet Storm

251365	7.5	危険	Emophp Programming	-	EMO Realty Manager の googlemap/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5006	2011-12-9 14:15	2011-11-2	Show	GitHub Exploit DB Packet Storm

251366	4.3	警告	ut-files	-	UTStats の pages/match_report.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5007	2011-12-9 14:14	2011-11-2	Show	GitHub Exploit DB Packet Storm

251367	7.5	危険	Denali	-	BrightSuite Groupware における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5008	2011-12-9 14:13	2011-11-2	Show	GitHub Exploit DB Packet Storm

251368	7.5	危険	ut-files	-	UTStats の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5009	2011-12-9 14:12	2011-11-2	Show	GitHub Exploit DB Packet Storm

251369	4.3	警告	FullSite Pty Ltd	-	SchoolMation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5010	2011-12-9 14:10	2011-11-2	Show	GitHub Exploit DB Packet Storm

251370	7.5	危険	FullSite Pty Ltd	-	SchoolMation における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5011	2011-12-9 14:10	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195841	7.8	HIGH Local	google	android	In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege al…	NVD-CWE-Other	CVE-2021-0307	2024-11-21 14:42	2021-01-12	Show	GitHub Exploit DB Packet Storm

195842	5.5	MEDIUM Local	google	android	In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's contacts with User e…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-0304	2024-11-21 14:42	2021-01-12	Show	GitHub Exploit DB Packet Storm

195843	7.8	HIGH Local	google	android	In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain the android.permission.ACTIVITY_RECOGNI…	CWE-269 Improper Privilege Management	CVE-2021-0306	2024-11-21 14:42	2021-01-12	Show	GitHub Exploit DB Packet Storm

195844	7.0	HIGH Local	google	android	In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition. This could lead to local esca…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2021-0303	2024-11-21 14:42	2021-01-12	Show	GitHub Exploit DB Packet Storm

195845	6.7	MEDIUM Local	google	android	In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed…	CWE-787 Out-of-bounds Write	CVE-2021-0301	2024-11-21 14:42	2021-01-12	Show	GitHub Exploit DB Packet Storm

195846	6.7	MEDIUM Local	google	android	In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is …	CWE-416 Use After Free	CVE-2021-0342	2024-11-21 14:42	2021-01-12	Show	GitHub Exploit DB Packet Storm

195847	5.3	MEDIUM Network	apple	macos	A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs.	NVD-CWE-noinfo	CVE-2020-9846	2024-11-21 14:41	2023-02-28	Show	GitHub Exploit DB Packet Storm

195848	5.3	MEDIUM Network	navercorp	whale	NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode.	NVD-CWE-noinfo	CVE-2020-9754	2024-11-21 14:41	2022-06-27	Show	GitHub Exploit DB Packet Storm

195849	6.6	MEDIUM Physics	netapp intel	cloud_backup fas\/aff_bios xeon_bronze_3206r_firmware xeon_gold_5218r_firmware xeon_gold_5220r_firmware xeon_gold_6208u_firmware xeon_gold_6226r_firmware xeon_gold_6230r_firmware…	Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.	CWE-665 Improper Initialization	CVE-2021-0125	2024-11-21 14:41	2022-02-10	Show	GitHub Exploit DB Packet Storm

195850	6.6	MEDIUM Physics	netapp intel	cloud_backup fas\/aff_bios xeon_bronze_3206r_firmware xeon_gold_5218r_firmware xeon_gold_5220r_firmware xeon_gold_6208u_firmware xeon_gold_6226r_firmware xeon_gold_6230r_firmware…	Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.	NVD-CWE-Other	CVE-2021-0124	2024-11-21 14:41	2022-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed