Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209251 5.4 警告 zillionmuslims - Android 用 Zillion Muslims アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7789 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209252 5.4 警告 best free giveaways project - Android 用 Best Free Giveaways アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7788 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209253 5.4 警告 synapse - Android 用 iShuttle アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7787 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209254 5.4 警告 Magzter Inc. - Android 用 English Football Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7786 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209255 5.4 警告 onesolutionapps - Android 用 AAAA Discount Bail アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7785 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209256 5.4 警告 Magzter Inc. - Android 用 Schon! Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7784 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209257 5.4 警告 billgbennett - Android 用 Bill G. Bennett アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7783 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209258 5.4 警告 macedonia hacienda hotel project - Android 用 Macedonia Hacienda Hotel アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7782 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209259 5.4 警告 fallacystudios - Android 用 Marijuana Handbook Lite - Weed アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7781 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209260 5.4 警告 ienvisage - Android 用 Pakistan Cricket News アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7780 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252581 - - - The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication and takeover admin accounts. CWE-79
Cross-site Scripting 		CVE-2024-49397 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
252582 - - - The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersonate Elvaco and send false information. CWE-522
 Insufficiently Protected Credentials 		CVE-2024-49396 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
252583 - - - Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root - CVE-2024-48192 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
252584 - - - In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users… CWE-79
Cross-site Scripting 		CVE-2024-9414 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
252585 - - - A vulnerability was found in CoinGate Plugin up to 1.2.7 on PrestaShop. It has been rated as problematic. Affected by this issue is the function postProcess of the file modules/coingate/controllers/f… - CVE-2018-25104 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
252586 - - - PutongOJ is online judging software. Prior to version 2.1.0-beta.1, unprivileged users can escalate privileges by constructing requests. This can lead to unauthorized access, enabling users to perfor… CWE-306
Missing Authentication for Critical Function 		CVE-2024-48920 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
252587 4.8 MEDIUM
Network 		- - A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This flaw affects the authentication mechanism, reducing the overall secu… CWE-305
 Authentication Bypass by Primary Weakness 		CVE-2024-9683 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
252588 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CodeFlock FREE DOWNLOAD MANAGER allows Path Traversal.This issue affects FREE DOWNLOAD MANAGER: from n/… - CVE-2024-49315 2024-10-18 21:52 2024-10-17 Show GitHub Exploit DB Packet Storm
252589 - - - Cross-Site Request Forgery (CSRF) vulnerability in WSIFY – Sales can fly Wsify Widget allows Stored XSS.This issue affects Wsify Widget: from n/a through 1.0. CWE-352
 Origin Validation Error 		CVE-2024-48048 2024-10-18 21:52 2024-10-17 Show GitHub Exploit DB Packet Storm
252590 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Supsystic Contact Form by Supsystic allows Stored XSS.This issue affects Contact Form by S… CWE-79
Cross-site Scripting 		CVE-2024-48046 2024-10-18 21:52 2024-10-17 Show GitHub Exploit DB Packet Storm