Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209861 5.4 警告 gunbroker - Android 用 GunBroker.com アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6889 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209862 5.4 警告 pennytalk - Android 用 PennyTalk Mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6888 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209863 5.4 警告 express - Android 用 EXPRESS アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6887 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209864 5.4 警告 wephoneapp - Android 用 WePhone - phone calls vs skype アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6886 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209865 5.4 警告 usbank - Android 用 Academy Sports + Outdoors Visa アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6885 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209866 5.4 警告 ford - Android 用 Ford Credit Account Manager アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6884 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209867 5.4 警告 cnn - Android 用 CNNMoney Portfolio for stocks アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6883 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209868 5.4 警告 western - Android 用 Western Federal Credit Union アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6882 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209869 5.4 警告 pnc - Android 用 PNC Virtual Wallet アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6881 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209870 5.4 警告 tradehero - Android 用 TradeHero アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6880 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252191 - - - The Bridge Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formforall' shortcode in versions up to, and including, 3.2.0 due to insufficient input sanitization and output … CWE-79
Cross-site Scripting 		CVE-2024-9292 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252192 - - - In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to implement Stored XSS on behalf of the Contributor+ by embedding malicious script… - CVE-2024-9021 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252193 - - - Custom Twitter Feeds WordPress plugin before 2.2.3 is not filtering some of its settings allowing high privilege users to inject scripts. - CVE-2024-8983 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252194 - - - All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does… - CVE-2024-21533 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252195 - - - All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along… - CVE-2024-21532 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252196 - - - Saltcorn is an extensible, open source, no-code database application builder. A logged-in user with any role can delete arbitrary files on the filesystem by calling the `sync/clean_sync_dir` endpoint… CWE-22
Path Traversal 		CVE-2024-47818 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252197 - - - Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values p… CWE-79
Cross-site Scripting 		CVE-2024-47817 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252198 - - - Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if th… CWE-416
 Use After Free 		CVE-2024-47814 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252199 - - - A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Vooki.exe. - CVE-2024-45874 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm
252200 - - - A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe. - CVE-2024-45873 2024-10-10 21:57 2024-10-8 Show GitHub Exploit DB Packet Storm