Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209671 5.4 警告 independent - Android 用 i Newspaper アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7085 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209672 5.4 警告 ireadercity - Android 用 Hesheng 80 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7084 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209673 5.4 警告 jiujik - Android 用 Jiu Jik アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7083 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209674 5.4 警告 imapp - Android 用 No Disturb アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7082 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209675 5.4 警告 sigong ebook project - Android 用 Sigong ebook アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7080 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209676 5.4 警告 cybird - Android 用 Romeo and Juliet アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7079 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209677 5.4 警告 payoneer sign up project - Android 用 Payoneer Sign Up アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7078 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209678 5.4 警告 gcefcu - Android 用 Gulf Coast Educators FCU アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7077 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209679 5.4 警告 Magzter Inc. - Android 用 Sanctuary Asia アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7076 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209680 5.4 警告 happycloud - Android 用 HAPPY アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7075 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252451 - - - DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an attacker to leverage the recvCmd binary to escape from the emulated instance and inject … - CVE-2024-41585 2024-10-8 04:37 2024-10-4 Show GitHub Exploit DB Packet Storm
252452 - - - A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate acc… - CVE-2024-42514 2024-10-8 04:37 2024-10-2 Show GitHub Exploit DB Packet Storm
252453 5.4 MEDIUM
Network 		connekthq ajax_load_more The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_label’ parameter in all versions up to, and including, 7.1.2 due to in… CWE-79
Cross-site Scripting 		CVE-2024-8505 2024-10-8 04:26 2024-10-2 Show GitHub Exploit DB Packet Storm
252454 6.1 MEDIUM
Network 		goldplugins custom_banners The Custom Banners plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3… CWE-79
Cross-site Scripting 		CVE-2024-8799 2024-10-8 04:22 2024-10-1 Show GitHub Exploit DB Packet Storm
252455 8.8 HIGH
Network 		plugingarden wp_easy_gallery The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘key’ parameter in all versions up to, and including, 4.8.5 due to insufficient e… CWE-89
SQL Injection 		CVE-2024-9018 2024-10-8 04:20 2024-10-1 Show GitHub Exploit DB Packet Storm
252456 5.0 MEDIUM
Network 		openstack
redhat 		heat
openstack_platform 		An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and th… NVD-CWE-noinfo
CVE-2024-7319 2024-10-8 04:15 2024-08-3 Show GitHub Exploit DB Packet Storm
252457 5.4 MEDIUM
Network 		librenms librenms LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Device Dependencies" feature allows authenticated users to inject… CWE-79
Cross-site Scripting 		CVE-2024-47527 2024-10-8 04:08 2024-10-2 Show GitHub Exploit DB Packet Storm
252458 5.4 MEDIUM
Network 		librenms librenms LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Alert Rules" feature allows authenticated users to inject arbitra… CWE-79
Cross-site Scripting 		CVE-2024-47525 2024-10-8 04:08 2024-10-2 Show GitHub Exploit DB Packet Storm
252459 5.4 MEDIUM
Network 		librenms librenms LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Alert Transports" feature allows authenticated users to inject ar… CWE-79
Cross-site Scripting 		CVE-2024-47523 2024-10-8 04:07 2024-10-2 Show GitHub Exploit DB Packet Storm
252460 9.8 CRITICAL
Network 		definetlynotai logicytics Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromised devices from shell injections. This vulnerability is fixed in 2.3.2. CWE-78
OS Command  		CVE-2024-47608 2024-10-8 03:51 2024-10-2 Show GitHub Exploit DB Packet Storm