Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209941	5.4	警告	intellegere	-	Android 用 Thanodi - Setswana Translator アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6806	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209942	5.4	警告	weibo project	-	Android 用 weibo アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6805	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209943	5.4	警告	boopsie	-	Android 用 Deschutes Public MobileLibrary アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6804	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209944	5.4	警告	bm	-	Android 用 Bank of Moscow EIRTS Rent アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6803	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209945	5.4	警告	subsplash	-	Android 用 First Assembly NLR アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6802	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209946	5.4	警告	frank matano project	-	Android 用 frank matano アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6801	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209947	5.4	警告	parentlink	-	Android 用 Bloom Township 206 アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6800	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209948	5.4	警告	CA Technologies	-	Android 用 Investigation Tool アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6799	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209949	5.4	警告	weeverapps	-	Android 用 McMaster Marauders アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6798	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

209950	5.4	警告	abu ali anasheeds project	-	Android 用 Abu Ali Anasheeds アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6797	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251671	5.5	MEDIUM Local	adobe	after_effects	After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…	CWE-125 Out-of-bounds Read	CVE-2024-41867	2024-10-16 22:31	2024-09-13	Show	GitHub Exploit DB Packet Storm

251672	7.2	HIGH Network	ivanti	endpoint_manager_cloud_services_appliance	Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.	CWE-22 Path Traversal	CVE-2024-9381	2024-10-16 22:30	2024-10-9	Show	GitHub Exploit DB Packet Storm

251673	7.5	HIGH Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information	CWE-22 Path Traversal	CVE-2024-47011	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

251674	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47010	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

251675	8.8	HIGH Network	adobe	commerce magento commerce_b2b	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged a…	NVD-CWE-noinfo	CVE-2024-45148	2024-10-16 22:27	2024-10-10	Show	GitHub Exploit DB Packet Storm

251676	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47009	2024-10-16 22:26	2024-10-9	Show	GitHub Exploit DB Packet Storm

251677	7.5	HIGH Network	ivanti	avalanche	Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47008	2024-10-16 22:24	2024-10-9	Show	GitHub Exploit DB Packet Storm

251678	7.5	HIGH Network	ivanti	avalanche	A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.	CWE-476 NULL Pointer Dereference	CVE-2024-47007	2024-10-16 22:23	2024-10-9	Show	GitHub Exploit DB Packet Storm

251679	6.7	MEDIUM Local	microsoft	windows_server_2012 windows_10_1507 windows_server_2016 windows_server_2022_23h2 windows_10_1809 windows_server_2022 windows_11_21h2 windows_10_21h2 windows_10_22h2 windows…	Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability	NVD-CWE-noinfo	CVE-2024-37983	2024-10-16 22:15	2024-10-9	Show	GitHub Exploit DB Packet Storm

251680	9.8	CRITICAL Network	alisonic	sibylla_firmware	Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database.	CWE-89 SQL Injection	CVE-2024-8630	2024-10-16 22:15	2024-09-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed