Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239491 3.5 注意 link3 - Drupal の Simplenews モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5996 2012-09-25 17:26 2008-09-24 Show GitHub Exploit DB Packet Storm
239492 7.5 危険 iyziforum - iyzi Forum におけるパスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5901 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239493 7.5 危険 mediatheka - Mediatheka の connection.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5895 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239494 6.8 警告 mediatheka - Mediatheka の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5894 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239495 2.6 注意 icash - ClickAndEmail の admin_dblayers.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5893 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239496 7.5 危険 icash - ClickAndEmail における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5892 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239497 4.3 警告 injader - Injader の profile editing 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5891 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239498 7.5 危険 injader - Injader の feeds.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5890 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239499 4.3 警告 icash - Click&Rank の user.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5889 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
239500 7.5 危険 icash - Click&Rank における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5888 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287271 - magzter human_factor The Human Factor (aka com.magzter.thehumanfactor) application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtai… CWE-310
Cryptographic Issues 		CVE-2014-7107 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287272 - pp-solution orakel-ball The Orakel-Ball (aka com.wOrakelball) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i… CWE-310
Cryptographic Issues 		CVE-2014-7106 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287273 - johtru gymnoovp The gymnoOVP (iOVP) (aka com.johtru.gymnoOVP) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sen… CWE-310
Cryptographic Issues 		CVE-2014-7104 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287274 - oskarshamnsliv_project oskarshamnsliv The Oskarshamnsliv (aka appinventor.ai_stadslivsguiden.Oskarshamnsliv) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spo… CWE-310
Cryptographic Issues 		CVE-2014-7103 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287275 - quotezone car_insurance_quote_comparison The Car Insurance Quote Comparison (aka com.seopa.quotezone) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… CWE-310
Cryptographic Issues 		CVE-2014-7102 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287276 - nobexrc talk_radio_europe The Talk Radio Europe (aka com.nobexinc.wls_31251464.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers … CWE-310
Cryptographic Issues 		CVE-2014-7101 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287277 - magzter woodcraft_magazine The Woodcraft Magazine (aka com.magzter.woodcraftmagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers a… CWE-310
Cryptographic Issues 		CVE-2014-7099 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287278 - fylet fylet_secure_large_file_sender The Fylet Secure Large File Sender (aka com.application.fyletFileSender) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to s… CWE-310
Cryptographic Issues 		CVE-2014-7098 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287279 - pocketmags superbike_magazine The Superbike Magazine (aka com.triactivemedia.superbike) application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof serv… CWE-310
Cryptographic Issues 		CVE-2014-7093 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm
287280 - ubooly ubooly The Ubooly (aka com.ubooly.ubooly) application 4.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive in… CWE-310
Cryptographic Issues 		CVE-2014-7092 2024-11-21 11:16 2014-10-19 Show GitHub Exploit DB Packet Storm