Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240811 5 警告 mail machine - Mail Machine の cgi-bin/mail/mailmachine.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3702 2012-09-25 16:47 2007-07-11 Show GitHub Exploit DB Packet Storm
240812 6.5 警告 infernotechnologies - vBulletin モジュールなどにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3687 2012-09-25 16:47 2007-07-11 Show GitHub Exploit DB Packet Storm
240813 7.5 危険 masuga design - Unobtrusive Ajax Star Rating Bar の db.php における CRLF インジェクションの脆弱性 - CVE-2007-3686 2012-09-25 16:47 2007-07-11 Show GitHub Exploit DB Packet Storm
240814 2.6 注意 masuga design - Unobtrusive Ajax Star Rating Bar の rpc.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3685 2012-09-25 16:47 2007-07-11 Show GitHub Exploit DB Packet Storm
240815 7.5 危険 masuga design - Unobtrusive Ajax Star Rating Bar における SQL インジェクションの脆弱性 - CVE-2007-3684 2012-09-25 16:47 2007-07-11 Show GitHub Exploit DB Packet Storm
240816 7.5 危険 openld - OpenLD の index.php における SQL インジェクションの脆弱性 - CVE-2007-3682 2012-09-25 16:47 2007-07-11 Show GitHub Exploit DB Packet Storm
240817 7.5 危険 maxsi - Maxsi eVisit Analyst における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3677 2012-09-25 16:47 2007-07-11 Show GitHub Exploit DB Packet Storm
240818 9.3 危険 カスペルスキー - Kaspersky Online Scanner におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2007-3675 2012-09-25 16:47 2007-10-9 Show GitHub Exploit DB Packet Storm
240819 7.8 危険 マイクロソフト - Microsoft Windows Vista におけるカーネルの脆弱性 - CVE-2007-3671 2012-09-25 16:47 2007-07-10 Show GitHub Exploit DB Packet Storm
240820 4.3 警告 innovasys - Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足
CVE-2007-3669 2012-09-25 16:47 2007-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287621 - coles_credit_cards coles_credit_card_app The Coles Credit Card App (aka au.com.colesfinancialservices.mobile) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spo… CWE-310
Cryptographic Issues
CVE-2014-5562 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287622 - devarai word_search_free The Word Search Free (aka air.wordSearchFree) application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sen… CWE-310
Cryptographic Issues
CVE-2014-5561 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287623 - mdickie popscene The Popscene (Music Industry Sim) (aka air.Popscene) application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob… CWE-310
Cryptographic Issues
CVE-2014-5560 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287624 - josiane_sauveterre goldfish_care The Kids GoldFish Care (aka air.josiane.sauveterre.kidsgoldfishcare) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spo… CWE-310
Cryptographic Issues
CVE-2014-5559 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287625 - mdickie hard_time The Hard Time (Prison Sim) (aka air.HardTime) application 1.111 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain s… CWE-310
Cryptographic Issues
CVE-2014-5558 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287626 - commerce america\'s_economy_for_phone The America's Economy for Phone (aka air.gov.census.mobile.phone.americaseconomy) application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle att… CWE-310
Cryptographic Issues
CVE-2014-5557 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287627 - flyfishing-and-flytying fly_fishing_\&_fly_tying The Fly Fishing & Fly Tying (aka air.com.yudu.ReaderAIR3209899) application 3.21.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s… CWE-310
Cryptographic Issues
CVE-2014-5556 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287628 - ilearnwith counting_\&_addition_kids_games The Counting & Addition Kids Games (aka air.com.tribalnova.ilearnwith.ipad.PokoAddEn) application 1.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle… CWE-310
Cryptographic Issues
CVE-2014-5555 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287629 - ilearnwith fun_preschool_creativity_game The Fun Preschool Creativity Game (aka air.com.tribalnova.ilearnwith.ipad.MotherAppEn) application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middl… CWE-310
Cryptographic Issues
CVE-2014-5554 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm
287630 - ilearnwith kids_preschool_learning_games The Kids Preschool Learning Games (aka air.com.tribalnova.ilearnwith.ipad.App3En) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle att… CWE-310
Cryptographic Issues
CVE-2014-5553 2024-11-21 11:12 2014-09-9 Show GitHub Exploit DB Packet Storm