Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241571 6.4 警告 ImgPals - ImgPals Photo Host の approve.php における管理者のアクティベーションを変更される脆弱性 CWE-287
不適切な認証
CVE-2012-4926 2012-09-19 16:20 2012-09-15 Show GitHub Exploit DB Packet Storm
241572 7.5 危険 ImgPals - ImgPals Photo Host の approve.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4925 2012-09-19 16:20 2012-09-15 Show GitHub Exploit DB Packet Storm
241573 9.3 危険 ASUSTeK Computer Inc. - ASUS Net4Switch 用 ipswcom.dll ActiveX コンポーネントにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4924 2012-09-19 16:18 2012-09-15 Show GitHub Exploit DB Packet Storm
241574 4.3 警告 Endian - Endian Firewall におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4923 2012-09-19 16:17 2012-09-15 Show GitHub Exploit DB Packet Storm
241575 4.3 警告 Mike Carr - Flogr の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4336 2012-09-19 16:17 2012-09-15 Show GitHub Exploit DB Packet Storm
241576 4.3 警告 Python Software Foundation - Beaker における重要なセッションデータの一部を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-3458 2012-09-19 16:16 2012-09-15 Show GitHub Exploit DB Packet Storm
241577 4.3 警告 Kayako - Kayako Fusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3233 2012-09-19 16:14 2012-09-15 Show GitHub Exploit DB Packet Storm
241578 6.8 警告 TestLink Development Team - TestLink におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2275 2012-09-19 16:12 2012-09-15 Show GitHub Exploit DB Packet Storm
241579 4.3 警告 Banana Dance - Banana Dance の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5176 2012-09-19 16:11 2011-10-2 Show GitHub Exploit DB Packet Storm
241580 7.5 危険 Banana Dance - Banana Dance の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-5175 2012-09-19 16:09 2011-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285151 - jellytap free_app_icons_\&_icon_packs The Free App Icons & Icon Packs (aka com.jellytap.cooliconfinder) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof se… CWE-310
Cryptographic Issues
CVE-2014-5911 2024-11-21 11:13 2014-09-17 Show GitHub Exploit DB Packet Storm
285152 - dog_whistle_project dog_whistle The Dog Whistle (aka com.dogwhistle.dogtrainingandroidapp) application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers a… CWE-310
Cryptographic Issues
CVE-2014-5910 2024-11-21 11:13 2014-09-17 Show GitHub Exploit DB Packet Storm
285153 - watcha watcha The watcha (aka com.frograms.watcha) application 2.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive … CWE-310
Cryptographic Issues
CVE-2014-5909 2024-11-21 11:13 2014-09-17 Show GitHub Exploit DB Packet Storm
285154 - kmart kmart The Kmart (aka com.kmart.android) application @7F0C00EF for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive… CWE-310
Cryptographic Issues
CVE-2014-5908 2024-11-21 11:13 2014-09-17 Show GitHub Exploit DB Packet Storm
285155 - libiitech pet_salon The Pet Salon (aka com.libiitech.petsalon) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens… CWE-310
Cryptographic Issues
CVE-2014-5907 2024-11-21 11:13 2014-09-17 Show GitHub Exploit DB Packet Storm
285156 - youngmoney lil_wayne_slots\ The Lil Wayne Slots: FREE SLOTS (aka com.lilwayneslots.slots.android) application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to sp… CWE-310
Cryptographic Issues
CVE-2014-5906 2024-11-21 11:13 2014-09-17 Show GitHub Exploit DB Packet Storm
285157 - meucarrinho grocery_list_-_tomatoes The Grocery List - Tomatoes (aka com.meucarrinho) application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obta… CWE-310
Cryptographic Issues
CVE-2014-5905 2024-11-21 11:13 2014-09-15 Show GitHub Exploit DB Packet Storm
285158 - miniinthebox miniinthebox_online_shopping The MiniInTheBox Online Shopping (aka com.miniinthebox.android) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof se… CWE-310
Cryptographic Issues
CVE-2014-5904 2024-11-21 11:13 2014-09-15 Show GitHub Exploit DB Packet Storm
285159 - mobileiron mobile\@work The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens… CWE-310
Cryptographic Issues
CVE-2014-5903 2024-11-21 11:13 2014-09-15 Show GitHub Exploit DB Packet Storm
285160 - uacinemas ua_cinemas_-_mobile_ticketing The UA Cinemas - Mobile ticketing (aka com.mtel.uacinemaapps) application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof server… CWE-310
Cryptographic Issues
CVE-2014-5902 2024-11-21 11:13 2014-09-15 Show GitHub Exploit DB Packet Storm