Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209541 5.4 警告 Magzter Inc. - Android 用 Youth Incorporated アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7423 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209542 5.4 警告 homerelectric - Android 用 HEA Mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7422 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209543 5.4 警告 mytoursapp - Android 用 Revel in the Rideau Lakes アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7421 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209544 5.4 警告 Magzter Inc. - Android 用 Just Bureaucracy アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7420 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209545 5.4 警告 pokecreator - Android 用 PokeCreator Lite アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7419 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209546 5.4 警告 Magzter Inc. - Android 用 BBC Knowledge Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7418 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209547 5.4 警告 realacademiabellasartessanfernando - Android 用 Real Academia de Bellas Artes アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7417 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209548 5.4 警告 pocketmags - Android 用 Craft Stamper Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7416 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209549 5.4 警告 nobexrc - Android 用 Asylum! アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7415 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209550 5.4 警告 Magzter Inc. - Android 用 CLEO Malaysia アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7414 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251001 - - - Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck Oñate User Toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through 1.2.3. CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-50503 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251002 - - - The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting. - CVE-2024-8444 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251003 6.4 MEDIUM
Network 		- - The WP Team – WordPress Team Member Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's htteamember shortcode in all versions up to, and including, 1.1.4 due to … CWE-79
Cross-site Scripting 		CVE-2024-10223 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251004 7.2 HIGH
Network 		- - The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's adverts_add shortcode in all versions up to, and including, 2.1.6 due to insuffic… CWE-79
Cross-site Scripting 		CVE-2024-10108 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251005 6.1 MEDIUM
Network 		- - The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL … CWE-79
Cross-site Scripting 		CVE-2024-8871 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251006 4.3 MEDIUM
Network 		- - The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_search_users function in all versions up to, and including, … CWE-862
 Missing Authorization 		CVE-2024-10399 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251007 6.4 MEDIUM
Network 		- - The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidu_map' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitiz… - CVE-2024-9886 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251008 6.4 MEDIUM
Network 		- - The Widget or Sidebar Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sidebar' shortcode in all versions up to, and including, 0.6.1 due to insufficient … CWE-79
Cross-site Scripting 		CVE-2024-9885 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251009 6.4 MEDIUM
Network 		- - The T(-) Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tminus' shortcode in all versions up to, and including, 2.4.8 due to insufficient input sanitiza… CWE-79
Cross-site Scripting 		CVE-2024-9884 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
251010 - - - A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulati… - CVE-2024-10509 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm