Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209571 5.4 警告 Magzter Inc. - Android 用 Sunday Indian Oriya アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7388 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209572 5.4 警告 accadvocacy - Android 用 ACC Advocacy Action アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7387 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209573 5.4 警告 aperturemobilemedia - Android 用 Aperture Mobile Media アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7385 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209574 5.4 警告 jobranco project - Android 用 Jobranco アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7378 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209575 5.4 警告 facebook profits on steroids project - Android 用 Facebook Profits on Steroids アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7376 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209576 5.4 警告 mobileappcity - Android 用 Childcare アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7375 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209577 5.4 警告 narr8 - Android 用 SPIN - Motion Comic アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7374 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209578 5.4 警告 Magzter Inc. - Android 用 Inspire Weddings アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7373 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209579 5.4 警告 kellygerards - Android 用 Mr.Sausage アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7372 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209580 5.4 警告 appearingbusiness - Android 用 Magic Balloonman Marty Boone アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7371 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293051 - natterchat natterchat NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp. CWE-287
Improper Authentication 		CVE-2008-7047 2017-09-29 10:33 2009-08-24 Show GitHub Exploit DB Packet Storm
293052 - natterchat natterchat Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the (1) txtUsername parameter (aka Username) and (2) txtPas… CWE-89
SQL Injection 		CVE-2008-7049 2017-09-29 10:33 2009-08-24 Show GitHub Exploit DB Packet Storm
293053 - ajsquare aj_article AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direct request to (1) user.php, (2) articles.php, (3) articlesuspend.php, (4) site.p… CWE-287
Improper Authentication 		CVE-2008-7051 2017-09-29 10:33 2009-08-24 Show GitHub Exploit DB Packet Storm
293054 - preprojects pre_real_estate_listings Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable exten… CWE-20
 Improper Input Validation  		CVE-2008-7052 2017-09-29 10:33 2009-08-24 Show GitHub Exploit DB Packet Storm
293055 - logmein ractrl.dll LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcolor and bgcolor properties to certain long values that trigg… CWE-399
 Resource Management Errors 		CVE-2008-7053 2017-09-29 10:33 2009-08-25 Show GitHub Exploit DB Packet Storm
293056 - grayscalecms bandsite_cms BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7056 2017-09-29 10:33 2009-08-25 Show GitHub Exploit DB Packet Storm
293057 - grayscalecms bandsite_cms Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via the type parameter. CWE-79
Cross-site Scripting 		CVE-2008-7057 2017-09-29 10:33 2009-08-25 Show GitHub Exploit DB Packet Storm
293058 - grayscalecms bandsite_cms Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators and force a logout via adminpanel/logout.php. CWE-352
 Origin Validation Error 		CVE-2008-7058 2017-09-29 10:33 2009-08-25 Show GitHub Exploit DB Packet Storm
293059 - lovecms lovecms Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executab… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7062 2017-09-29 10:33 2009-08-25 Show GitHub Exploit DB Packet Storm
293060 - ocean12tech faq_manager_pro Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb. CWE-200
Information Exposure 		CVE-2008-7063 2017-09-29 10:33 2009-08-25 Show GitHub Exploit DB Packet Storm