Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209681 5.4 警告 andrew magdy kamal's network project - Android 用 Andrew Magdy Kamal's Network アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7073 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209682 5.4 警告 offertaviaggi - Android 用 Venezia map アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7072 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209683 5.4 警告 Magzter Inc. - Android 用 Autocar India アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7071 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209684 5.4 警告 air war hero project - Android 用 Air War Hero アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7070 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209685 5.4 警告 aventinobrand - Android 用 Aventino Brand アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7069 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209686 5.4 警告 neumann - Android 用 Neumann Student Activities アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7068 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209687 5.4 警告 appsgeyser - Android 用 BTD5 Videos アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7067 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209688 5.4 警告 Magzter Inc. - Android 用 LegalEra アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7066 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209689 5.4 警告 ukbusinessaid - Android 用 Nigerias Business Directory アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7065 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209690 5.4 警告 ben10 omniverse walkthrough project - Android 用 ben10 omniverse walkthrough アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7064 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306781 - mysql eventum Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.aut… NVD-CWE-Other
CVE-2005-2468 2016-10-18 12:27 2005-12-31 Show GitHub Exploit DB Packet Storm
306782 - macromedia coldfusion_fusebox ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the "… NVD-CWE-Other
CVE-2005-2481 2016-10-18 12:27 2005-08-5 Show GitHub Exploit DB Packet Storm
306783 - phpcounter phpcounter Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject arbitrary web script or HTML via the EpochPrefix parameter. NVD-CWE-Other
CVE-2005-2288 2016-10-18 12:26 2005-07-18 Show GitHub Exploit DB Packet Storm
306784 - phpcounter phpcounter PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message. NVD-CWE-Other
CVE-2005-2289 2016-10-18 12:26 2005-07-18 Show GitHub Exploit DB Packet Storm
306785 - - - wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and (2) cat variables. NVD-CWE-Other
CVE-2005-2290 2016-10-18 12:26 2005-07-18 Show GitHub Exploit DB Packet Storm
306786 - oracle jdeveloper Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information. NVD-CWE-Other
CVE-2005-2291 2016-10-18 12:26 2005-07-18 Show GitHub Exploit DB Packet Storm
306787 - yabb yabb YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which reveals the path. NVD-CWE-Other
CVE-2005-2296 2016-10-18 12:26 2005-07-18 Show GitHub Exploit DB Packet Storm
306788 - sybase easerver Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter. NVD-CWE-Other
CVE-2005-2297 2016-10-18 12:26 2005-07-19 Show GitHub Exploit DB Packet Storm
306789 - softwin bitdefender_engine BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefe… NVD-CWE-Other
CVE-2005-2298 2016-10-18 12:26 2005-07-19 Show GitHub Exploit DB Packet Storm
306790 - - - Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2… NVD-CWE-Other
CVE-2005-2299 2016-10-18 12:26 2005-07-19 Show GitHub Exploit DB Packet Storm