Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209691	5.4	警告	bikersromagna	-	Android 用 Bikers Romagna アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7063	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209692	5.4	警告	association min ajlik project	-	Android 用 Association Min Ajlik アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7062	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209693	5.4	警告	modsimconnected	-	Android 用 MODSIM World 2014 アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7061	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209694	5.4	警告	yourtango	-	Android 用 Your Tango アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7060	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209695	5.4	警告	thedevildoggamer project	-	Android 用 TheDevildogGamer アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7059	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209696	5.4	警告	efendimizin sunnetleri project	-	Android 用 Efendimizin Sunnetleri アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7058	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209697	5.4	警告	Magzter Inc.	-	Android 用 Hong Kong Tatler Society アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7057	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209698	5.4	警告	yeast infection project	-	Android 用 Yeast Infection アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7056	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209699	5.4	警告	quickmobile	-	Android 用 NCCI's Annual Issues Symposium アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7055	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209700	5.4	警告	nobexrc	-	Android 用 musica de barrios sonideros アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7054	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251671	5.5	MEDIUM Local	adobe	after_effects	After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…	CWE-125 Out-of-bounds Read	CVE-2024-41867	2024-10-16 22:31	2024-09-13	Show	GitHub Exploit DB Packet Storm

251672	7.2	HIGH Network	ivanti	endpoint_manager_cloud_services_appliance	Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.	CWE-22 Path Traversal	CVE-2024-9381	2024-10-16 22:30	2024-10-9	Show	GitHub Exploit DB Packet Storm

251673	7.5	HIGH Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information	CWE-22 Path Traversal	CVE-2024-47011	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

251674	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47010	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

251675	8.8	HIGH Network	adobe	commerce magento commerce_b2b	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged a…	NVD-CWE-noinfo	CVE-2024-45148	2024-10-16 22:27	2024-10-10	Show	GitHub Exploit DB Packet Storm

251676	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47009	2024-10-16 22:26	2024-10-9	Show	GitHub Exploit DB Packet Storm

251677	7.5	HIGH Network	ivanti	avalanche	Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47008	2024-10-16 22:24	2024-10-9	Show	GitHub Exploit DB Packet Storm

251678	7.5	HIGH Network	ivanti	avalanche	A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.	CWE-476 NULL Pointer Dereference	CVE-2024-47007	2024-10-16 22:23	2024-10-9	Show	GitHub Exploit DB Packet Storm

251679	6.7	MEDIUM Local	microsoft	windows_server_2012 windows_10_1507 windows_server_2016 windows_server_2022_23h2 windows_10_1809 windows_server_2022 windows_11_21h2 windows_10_21h2 windows_10_22h2 windows…	Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability	NVD-CWE-noinfo	CVE-2024-37983	2024-10-16 22:15	2024-10-9	Show	GitHub Exploit DB Packet Storm

251680	9.8	CRITICAL Network	alisonic	sibylla_firmware	Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database.	CWE-89 SQL Injection	CVE-2024-8630	2024-10-16 22:15	2024-09-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed