Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209731 5.4 警告 leg surgery - kids games project - Android 用 Leg Surgery - Kids Games アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7021 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209732 5.4 警告 diabetes - Android 用 Diabetes Forum アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7020 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209733 5.4 警告 blynk - Android 用 Clarks Inn アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7019 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209734 5.4 警告 efunfun - Android 用 LOVE DANCE アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7018 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209735 5.4 警告 tim ban bon phuong project - Android 用 Tim Ban Bon Phuong アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7017 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209736 5.4 警告 mahasna batik project - Android 用 Mahasna Batik アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7016 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209737 5.4 警告 jjmatch - Android 用 JJ Texas Hold'em Poker アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7015 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209738 5.4 警告 funny photo color editor project - Android 用 Funny Photo Color Editor アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7013 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209739 5.4 警告 coffee-inn - Android 用 Coffee Inn アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7012 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209740 5.4 警告 nwtc - Android 用 NWTC Mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7011 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250921 - - - In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that … - CVE-2024-3935 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250922 - - - In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access whe… - CVE-2024-10525 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250923 - - - The Black Widgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.7 due to insufficient input sanitizati… CWE-79
Cross-site Scripting 		CVE-2024-9388 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250924 9.1 CRITICAL
Network 		- - The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization() function. This i… CWE-95
Eval Injection 		CVE-2024-8512 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250925 - - - Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through 3.10.2. CWE-209
Information Exposure Through an Error Message 		CVE-2024-50512 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250926 - - - Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a throug… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-50511 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250927 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Web and Print Design AR For Woocommerce allows Upload a Web Shell to a Web Server.This issue affects AR For Woocommerce: from n/a thro… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-50510 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250928 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product … CWE-22
Path Traversal 		CVE-2024-50509 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250929 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product … CWE-22
Path Traversal 		CVE-2024-50508 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm
250930 - - - Deserialization of Untrusted Data vulnerability in Daniel Schmitzer DS.DownloadList allows Object Injection.This issue affects DS.DownloadList: from n/a through 1.3. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-50507 2024-11-1 21:57 2024-10-30 Show GitHub Exploit DB Packet Storm