Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
215801	5.4	警告	clubpersonal	-	Android 用 Club Personal アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5835	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215802	5.4	警告	mobiledeluxe	-	Android 用 Solitaire Deluxe アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5834	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215803	5.4	警告	onelouder	-	Android 用 FriendCaster Chat アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5833	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215804	5.4	警告	hanabank	-	Android 用 hananbank アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5832	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215805	5.4	警告	happylabs	-	Android 用 Hotel Story: Resort Simulation アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5831	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215806	5.4	警告	farm frenzy gold project	-	Android 用 Farm Frenzy Gold アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5830	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215807	5.4	警告	hobbylobby	-	Android 用 Hobby Lobby Stores アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5829	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215808	5.4	警告	drei	-	Android 用 3Kundenzone アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5828	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215809	5.4	警告	ibotta	-	Android 用 Ibotta - Better than Coupons. アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5827	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215810	5.4	警告	rix go locker theme project	-	Android 用 Rix GO Locker Theme アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-5826	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295951	5.5	MEDIUM Local	git-extras_project	git-extras	The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort.	CWE-59 Link Following	CVE-2012-6114	2024-11-21 10:45	2020-01-29	Show	GitHub Exploit DB Packet Storm

295952	7.8	HIGH Local	soapbox_project	soapbox	Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.	CWE-269 Improper Privilege Management	CVE-2012-6302	2024-11-21 10:45	2020-01-25	Show	GitHub Exploit DB Packet Storm

295953	7.5	HIGH Network	freeciv	freeciv	Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.	CWE-400 Uncontrolled Resource Consumption	CVE-2012-6083	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

295954	9.8	CRITICAL Network	ht_editor_project	ht_editor	HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability	CWE-787 Out-of-bounds Write	CVE-2012-5867	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

295955	9.8	CRITICAL Network	babygekko	babygekko	BabyGekko before 1.2.4 allows PHP file inclusion.	CWE-20 Improper Input Validation	CVE-2012-5699	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

295956	8.8	HIGH Network	babygekko	babygekko	BabyGekko before 1.2.4 has SQL injection.	CWE-89 SQL Injection	CVE-2012-5698	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

295957	9.8	CRITICAL Network	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or …	CWE-78 OS Command	CVE-2012-5878	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

295958	8.8	HIGH Adjacent	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2)…	CWE-78 OS Command	CVE-2012-5693	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

295959	7.5	HIGH Network	openbsd	textproc\/isearch	The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).	CWE-269 CWE-459 Improper Privilege Management Incomplete Cleanup	CVE-2012-5663	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

295960	7.5	HIGH Network	freeciv fedoraproject	freeciv fedora	A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed woul…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-5645	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed