Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209381 5.4 警告 atme - Android 用 Atme アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7626 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209382 5.4 警告 aiadp - Android 用 Guess the Pixel Character Quiz アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7624 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209383 5.4 警告 affinitycu - Android 用 Affinity Mobile ATM Locator アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7622 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209384 5.4 警告 ein lookup project - Android 用 EIN Lookup アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7621 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209385 5.4 警告 authorsontourlive - Android 用 Authors On Tour - Live! アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7620 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209386 5.4 警告 moderndecoration - Android 用 Interior Design アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7618 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209387 5.4 警告 roads365 - Android 用 www.roads365.com アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7617 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209388 5.4 警告 physicsforums - Android 用 Physics Forums アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7616 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209389 5.4 警告 warrior beach retreat project - Android 用 Warrior Beach Retreat アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7614 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209390 5.4 警告 pocketmags - Android 用 WASPS Official Programmes アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7613 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252301 - - - An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-toggle-button-label is not escaped, but should be, because the line param can hav… - CVE-2023-45359 2024-10-10 21:51 2024-10-9 Show GitHub Exploit DB Packet Storm
252302 - - - check_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with \${IFS}. This has been categorized both as fixed in e8810de,… - CVE-2023-37154 2024-10-10 21:51 2024-10-9 Show GitHub Exploit DB Packet Storm
252303 - - - Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty client_password parameter (client secret). - CVE-2024-45160 2024-10-10 21:51 2024-10-9 Show GitHub Exploit DB Packet Storm
252304 6.4 MEDIUM
Network
- - The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multiple shortcodes in all versions up to, and including, 1.8.8 due to insufficient … CWE-79
Cross-site Scripting
CVE-2024-7963 2024-10-10 21:51 2024-10-9 Show GitHub Exploit DB Packet Storm
252305 - - - Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - CVE-2024-9603 2024-10-10 21:51 2024-10-9 Show GitHub Exploit DB Packet Storm
252306 - - - Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) - CVE-2024-9602 2024-10-10 21:51 2024-10-9 Show GitHub Exploit DB Packet Storm
252307 - - - An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign in. While removal of all role mappings is unlikely, it could … - CVE-2024-9412 2024-10-10 21:51 2024-10-9 Show GitHub Exploit DB Packet Storm
252308 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Recompute DSC Params if no Stream on Link [why] Encounter NULL pointer dereference uner mst + dsc setup. B… CWE-476
 NULL Pointer Dereference
CVE-2024-43895 2024-10-10 21:15 2024-08-26 Show GitHub Exploit DB Packet Storm
252309 - - - Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR1… - CVE-2024-22068 2024-10-10 18:15 2024-10-10 Show GitHub Exploit DB Packet Storm
252310 - - - VMware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary commands on the operat… - CVE-2024-38817 2024-10-10 17:15 2024-10-10 Show GitHub Exploit DB Packet Storm