Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217921	5.4	警告	iata	-	Android 用 Airlines International アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6712	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217922	5.4	警告	nobexrc	-	Android 用 ABC Lounge Webradio アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6711	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217923	5.4	警告	chifro	-	Android 用 Chifro Kids Coloring Game アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6710	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217924	5.4	警告	techradar news project	-	Android 用 TechRadar News アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6709	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217925	5.4	警告	sportinginnovations	-	Android 用 Sporting Club Uphoria アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6708	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217926	5.4	警告	7sage	-	Android 用 7Sage LSAT Prep - Proctor アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6707	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217927	5.4	警告	erau	-	Android 用 Embry-Riddle アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6706	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217928	5.4	警告	maher zain project	-	Android 用 Maher Zain アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6705	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217929	5.4	警告	sportinginnovations	-	Android 用 Utah Jazz アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6704	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

217930	5.4	警告	phonearabs4 project	-	Android 用 phonearabs4 アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-6703	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297721	8.3	HIGH Adjacent	silabs	zgm130s037hgn_firmware zm5202_firmware zm5101_firmware zgm2305a27hgn_firmware zgm230sb27hgn_firmware	Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2013-20003	2024-11-21 10:50	2022-02-5	Show	GitHub Exploit DB Packet Storm

297722	9.8	CRITICAL Network	themify	framework	Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-20002	2024-11-21 10:50	2021-06-18	Show	GitHub Exploit DB Packet Storm

297723	7.5	HIGH Network	openzfs	openzfs	An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is all…	NVD-CWE-noinfo	CVE-2013-20001	2024-11-21 10:50	2021-02-13	Show	GitHub Exploit DB Packet Storm

297724	7.5	HIGH Network	python	python	The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.	NVD-CWE-noinfo	CVE-2013-1753	2024-11-21 10:50	2020-03-12	Show	GitHub Exploit DB Packet Storm

297725	9.8	CRITICAL Network	berkeley	boinc	Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2013-2018	2024-11-21 10:50	2020-02-20	Show	GitHub Exploit DB Packet Storm

297726	7.5	HIGH Network	intel	82574l_controller_firmware	A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing…	CWE-665 Improper Initialization	CVE-2013-1634	2024-11-21 10:50	2020-02-14	Show	GitHub Exploit DB Packet Storm

297727	6.1	MEDIUM Network	zimbra	zimbra	Zimbra 2013 has XSS in aspell.php	CWE-79 Cross-site Scripting	CVE-2013-1938	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

297728	7.5	HIGH Network	skill	commerce_skrill	Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2	NVD-CWE-Other	CVE-2013-1924	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

297729	9.8	CRITICAL Network	boldgrid automattic	w3_total_cache wp_super_cache	WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability	CWE-74 Injection	CVE-2013-2010	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

297730	9.8	CRITICAL Network	yabb	yabb	YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-2057	2024-11-21 10:50	2020-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed