Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209581 5.4 警告 mobleeps - Android 用 Job MoBleeps アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7370 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209582 5.4 警告 galsila - Android 用 Il Brillo Parlante アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7369 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209583 5.4 警告 creatingahaven - Android 用 Compassion Satisfaction アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7368 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209584 5.4 警告 tus-radis - Android 用 TuS 1947 Radis アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7367 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209585 5.4 警告 Magzter Inc. - Android 用 Identity アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7366 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209586 5.4 警告 promotionalshop - Android 用 Promotional Items アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7364 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209587 5.4 警告 naranjascontocados - Android 用 Naranjas Con Tocados アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7362 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209588 5.4 警告 emunching - Android 用 Harry's Pub アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7361 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209589 5.4 警告 health - Android 用 How To Boil Eggs アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7360 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209590 5.4 警告 elsio - Android 用 MAPA DA MINA アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7359 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293761 - xnova xnova PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamela… CWE-94
Code Injection
CVE-2008-6022 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293762 - xnova xnova PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the xnova_ro… CWE-94
Code Injection
CVE-2008-6023 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293763 - openelec openelec Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj parameter. CWE-22
Path Traversal
CVE-2008-6025 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293764 - university_of_queensland fez SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter in a subject acti… CWE-89
SQL Injection
CVE-2008-6028 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293765 - buzzywall buzzywall SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter. CWE-89
SQL Injection
CVE-2008-6029 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293766 - netartmedia jobs_portal Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL commands via (1) the job parameter to index.php in the search module or (2) the n… CWE-89
SQL Injection
CVE-2008-6030 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293767 - wsn_links wsn_links SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported that 2.34 is also vulne… CWE-89
SQL Injection
CVE-2008-6031 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293768 - wsn links SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-6032 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293769 - wsn_links wsn_links SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-6033 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm
293770 - basebuilder basebuilder PHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mj_config[src_path] parameter. CWE-94
Code Injection
CVE-2008-6036 2017-09-29 10:32 2009-02-3 Show GitHub Exploit DB Packet Storm