Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209511 5.4 警告 superluckycasino - Android 用 Slots Heaven:FREE Slot Machine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7460 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209512 5.4 警告 civitasmedia - Android 用 Press-Leader アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7459 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209513 5.4 警告 bloomyou - Android 用 BloomYou Valentine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7458 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209514 5.4 警告 Magzter Inc. - Android 用 Electronics For You アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7457 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209515 5.4 警告 Magzter Inc. - Android 用 Digit Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7456 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209516 5.4 警告 automon - Android 用 Zoella Unofficial アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7455 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209517 5.4 警告 mbtcreations - Android 用 Detox Juicing Diet Recipes アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7454 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209518 5.4 警告 shaklee product catalog project - Android 用 Shaklee Product Catalog アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7452 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209519 5.4 警告 allnurses - Android 用 allnurses アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7450 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209520 5.4 警告 ngemc - Android 用 My NGEMC Account アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7449 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293051 - brewblogger brewblogger SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger (BB) 2.1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbi… CWE-89
SQL Injection 		CVE-2008-6911 2017-09-29 10:33 2009-08-7 Show GitHub Exploit DB Packet Storm
293052 - zeeways shaadiclone Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php. CWE-287
Improper Authentication 		CVE-2008-6912 2017-09-29 10:33 2009-08-8 Show GitHub Exploit DB Packet Storm
293053 - zeeways zeejobsite Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as… CWE-20
 Improper Input Validation  		CVE-2008-6913 2017-09-29 10:33 2009-08-8 Show GitHub Exploit DB Packet Storm
293054 - zeeways zeeproperty Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6914 2017-09-29 10:33 2009-08-8 Show GitHub Exploit DB Packet Storm
293055 - zeeways zeeproperty Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web script or HTML via the propid parameter. CWE-79
Cross-site Scripting 		CVE-2008-6915 2017-09-29 10:33 2009-08-8 Show GitHub Exploit DB Packet Storm
293056 - siemens
john_doe 		speedstream_5200
netport_software 		Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly involving a trailing dot in the hostname. CWE-287
Improper Authentication 		CVE-2008-6916 2017-09-29 10:33 2009-08-8 Show GitHub Exploit DB Packet Storm
293057 - exoscripts exophpdesk SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username (user parameter). CWE-89
SQL Injection 		CVE-2008-6917 2017-09-29 10:33 2009-08-8 Show GitHub Exploit DB Packet Storm
293058 - theportal2.pl theportal2 Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6918 2017-09-29 10:33 2009-08-11 Show GitHub Exploit DB Packet Storm
293059 - taskdriver taskdriver profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin." CWE-287
Improper Authentication 		CVE-2008-6919 2017-09-29 10:33 2009-08-11 Show GitHub Exploit DB Packet Storm
293060 - w2b phpemployment Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a regnew action, then… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6920 2017-09-29 10:33 2009-08-11 Show GitHub Exploit DB Packet Storm