Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209951 5.4 警告 localsense - Android 用 LocalSense アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6796 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209952 5.4 警告 Group Builder - Android 用 Beekeeping Forum アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6795 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209953 5.4 警告 boopsie - Android 用 AAPLD アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6794 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209954 5.4 警告 roboticoverlords - Android 用 Arch Friend アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6793 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209955 5.4 警告 suriname radio project - Android 用 Suriname Radio アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6792 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209956 5.4 警告 atastefromheaven - Android 用 Angel Reigns アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6791 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209957 5.4 警告 keyinternet - Android 用 INVEX アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6790 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209958 5.4 警告 boopsie - Android 用 Anaheim Library 2Go! アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6789 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209959 5.4 警告 oman news project - Android 用 Oman News アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6788 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
209960 5.4 警告 counterintuition - Android 用 Counter Intuition アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6787 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251951 - - - An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted string. - CVE-2024-25885 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251952 7.1 HIGH
Adjacent 		- - Windows Hyper-V Security Feature Bypass Vulnerability CWE-20
 Improper Input Validation  		CVE-2024-20659 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251953 5.3 MEDIUM
Network 		- - A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is … CWE-444
HTTP Request Smuggling 		CVE-2024-9622 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251954 5.3 MEDIUM
Network 		- - A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configura… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-9621 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251955 5.3 MEDIUM
Network 		- - A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of sensitive information. An attacker with network access could exploit this vulnerabili… - CVE-2024-9620 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251956 - - - A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation. - CVE-2024-3057 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251957 - - - A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to … - CVE-2024-45880 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251958 - - - An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7.2.5 and below, 7.0.12 and below allows a remote authenticated attacker assigne… CWE-200
Information Exposure 		CVE-2024-33506 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
251959 6.4 MEDIUM
Network 		- - The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.3.982 due to insufficient in… CWE-79
Cross-site Scripting 		CVE-2024-8482 2024-10-10 21:56 2024-10-8 Show GitHub Exploit DB Packet Storm
251960 4.3 MEDIUM
Network 		- - The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajaxGetGalleryJson() function in all … CWE-862
 Missing Authorization 		CVE-2024-8431 2024-10-10 21:56 2024-10-8 Show GitHub Exploit DB Packet Storm