Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209471 5.4 警告 appbelle - Android 用 Top Hangover Cures アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7513 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209472 5.4 警告 present-technologies - Android 用 Graffit It アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7510 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209473 5.4 警告 ireadercity - Android 用 A Very Short History of Japan アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7509 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209474 5.4 警告 childrens - Android 用 Help For Doc アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7508 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209475 5.4 警告 androidcommunity - Android 用 Hector Leal アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7507 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209476 5.4 警告 imapp - Android 用 Realtime Music Rank アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7506 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209477 5.4 警告 apptalk project - Android 用 AppTalk アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7505 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209478 5.4 警告 escucha eldiario project - Android 用 Escucha elDiario.es アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7502 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209479 5.4 警告 translation widget project - Android 用 Translation Widget アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7501 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209480 5.4 警告 ireadercity - Android 用 Sword アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7499 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293281 - shiftthis shifthis_newsletter SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter,… CWE-89
SQL Injection
CVE-2008-4625 2017-09-29 10:32 2008-10-21 Show GitHub Exploit DB Packet Storm
293282 - zirkon_box yappa-ng Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 and possibly other versions through 2.3.3-beta0, when magic_quotes_gpc is… CWE-22
Path Traversal
CVE-2008-4626 2017-09-29 10:32 2008-10-21 Show GitHub Exploit DB Packet Storm
293283 - rgallery rgallery_plugin SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper … CWE-89
SQL Injection
CVE-2008-4627 2017-09-29 10:32 2008-10-21 Show GitHub Exploit DB Packet Storm
293284 - mywebland minibloggie SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter. CWE-89
SQL Injection
CVE-2008-4628 2017-09-29 10:32 2008-10-21 Show GitHub Exploit DB Packet Storm
293285 - kure kure Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. (dot dot… CWE-22
Path Traversal
CVE-2008-4632 2017-09-29 10:32 2008-10-21 Show GitHub Exploit DB Packet Storm
293286 - astrospaces astrospaces SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action. CWE-89
SQL Injection
CVE-2008-4642 2017-09-29 10:32 2008-10-22 Show GitHub Exploit DB Packet Storm
293287 - mywebland mystats SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter. CWE-89
SQL Injection
CVE-2008-4643 2017-09-29 10:32 2008-10-22 Show GitHub Exploit DB Packet Storm
293288 - mywebland mystats hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-4644 2017-09-29 10:32 2008-10-22 Show GitHub Exploit DB Packet Storm
293289 - phpwebgallery phpwebgallery plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is proce… CWE-94
Code Injection
CVE-2008-4645 2017-09-29 10:32 2008-10-22 Show GitHub Exploit DB Packet Storm
293290 - mywebland myevent SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate parameter. CWE-89
SQL Injection
CVE-2008-4650 2017-09-29 10:32 2008-10-22 Show GitHub Exploit DB Packet Storm