Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239361 7.5 危険 ocean12tech - Ocean12 Membership Manager Pro の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6390 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239362 7.5 危険 mxmania - Gallery MX の pics_pre.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6379 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239363 7.5 危険 mxmania - Calendar Mx Professional の calendar_Eventupdate.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6378 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239364 7.5 危険 nexusjnr - Jbook の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6376 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239365 5 警告 nexusjnr - JBook におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6375 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239366 5 警告 Nagios Enterprises, LLC - Nagios における脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6373 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239367 7.5 危険 ocean12tech - Ocean12 FAQ Manager Pro の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6372 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239368 7.5 危険 ocean12tech - Ocean12 Membership Manager Pro の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6371 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239369 4.3 警告 ocean12tech - Ocean12 Contact Manager Pro の default.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6370 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
239370 7.5 危険 ocean12tech - Ocean12 Contact Manager Pro の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6369 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286931 - webpromoexperts webpromoexperts The WebPromoExperts (aka ua.com.webpromoexperts) application 1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain … CWE-310
Cryptographic Issues 		CVE-2014-7590 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286932 - icbc industrial_and_commercial_bank_of_china The Industrial and Commercial Bank of China (ICBC) Banking (aka com.icbc.android) application 2.40 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle atta… CWE-310
Cryptographic Issues 		CVE-2014-7589 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286933 - designtoolkits blocked_in_free The Blocked in Free (aka com.blueup.blocked) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens… CWE-310
Cryptographic Issues 		CVE-2014-7587 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286934 - gcspublishing biplane_forum The Biplane Forum (aka com.gcspublishing.biplaneforum) application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers an… CWE-310
Cryptographic Issues 		CVE-2014-7585 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286935 - dataparadigm acn2go The ACN2GO (aka com.dataparadigm.acnmobile) application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensi… CWE-310
Cryptographic Issues 		CVE-2014-7584 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286936 - c2ae water_lateral_sizer The Water Lateral Sizer (aka com.wWaterLateralSizer) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obt… CWE-310
Cryptographic Issues 		CVE-2014-7582 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286937 - quotes_of_travis_barker_project quotes_of_travis_barker The Quotes of Travis Barker (aka com.celebrity_quotes.travisbarker) application 0.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoo… CWE-310
Cryptographic Issues 		CVE-2014-7581 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286938 - thailand_investor_news_project thailand_investor_news The Thailand Investor News (aka nudecreative.thaistock.set) application 1.39s for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof server… CWE-310
Cryptographic Issues 		CVE-2014-7580 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286939 - biebernoticias bieber_news_now The Bieber News Now (aka com.jbnews) application 12.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive… CWE-310
Cryptographic Issues 		CVE-2014-7578 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm
286940 - bandh b\&h_photo_video_pro_audio The B&H Photo Video Pro Audio (aka com.bhphoto) application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… CWE-310
Cryptographic Issues 		CVE-2014-7577 2024-11-21 11:17 2014-10-20 Show GitHub Exploit DB Packet Storm