Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218391	5.4	警告	sigong ebook project	-	Android 用 Sigong ebook アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7080	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218392	5.4	警告	cybird	-	Android 用 Romeo and Juliet アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7079	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218393	5.4	警告	payoneer sign up project	-	Android 用 Payoneer Sign Up アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7078	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218394	5.4	警告	gcefcu	-	Android 用 Gulf Coast Educators FCU アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7077	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218395	5.4	警告	Magzter Inc.	-	Android 用 Sanctuary Asia アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7076	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218396	5.4	警告	happycloud	-	Android 用 HAPPY アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7075	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218397	5.4	警告	andrew magdy kamal's network project	-	Android 用 Andrew Magdy Kamal's Network アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7073	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218398	5.4	警告	offertaviaggi	-	Android 用 Venezia map アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7072	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218399	5.4	警告	Magzter Inc.	-	Android 用 Autocar India アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7071	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

218400	5.4	警告	air war hero project	-	Android 用 Air War Hero アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7070	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297721	8.3	HIGH Adjacent	silabs	zgm130s037hgn_firmware zm5202_firmware zm5101_firmware zgm2305a27hgn_firmware zgm230sb27hgn_firmware	Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2013-20003	2024-11-21 10:50	2022-02-5	Show	GitHub Exploit DB Packet Storm

297722	9.8	CRITICAL Network	themify	framework	Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-20002	2024-11-21 10:50	2021-06-18	Show	GitHub Exploit DB Packet Storm

297723	7.5	HIGH Network	openzfs	openzfs	An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is all…	NVD-CWE-noinfo	CVE-2013-20001	2024-11-21 10:50	2021-02-13	Show	GitHub Exploit DB Packet Storm

297724	7.5	HIGH Network	python	python	The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.	NVD-CWE-noinfo	CVE-2013-1753	2024-11-21 10:50	2020-03-12	Show	GitHub Exploit DB Packet Storm

297725	9.8	CRITICAL Network	berkeley	boinc	Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2013-2018	2024-11-21 10:50	2020-02-20	Show	GitHub Exploit DB Packet Storm

297726	7.5	HIGH Network	intel	82574l_controller_firmware	A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing…	CWE-665 Improper Initialization	CVE-2013-1634	2024-11-21 10:50	2020-02-14	Show	GitHub Exploit DB Packet Storm

297727	6.1	MEDIUM Network	zimbra	zimbra	Zimbra 2013 has XSS in aspell.php	CWE-79 Cross-site Scripting	CVE-2013-1938	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

297728	7.5	HIGH Network	skill	commerce_skrill	Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2	NVD-CWE-Other	CVE-2013-1924	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

297729	9.8	CRITICAL Network	boldgrid automattic	w3_total_cache wp_super_cache	WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability	CWE-74 Injection	CVE-2013-2010	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

297730	9.8	CRITICAL Network	yabb	yabb	YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-2057	2024-11-21 10:50	2020-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed