Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252061	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5057	2011-11-25 10:13	2011-11-23	Show	GitHub Exploit DB Packet Storm

252062	7.5	危険	IXXO Internet Solutions	-	XOBBIX コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5053	2011-11-25 10:08	2011-11-23	Show	GitHub Exploit DB Packet Storm

252063	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

252064	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

252065	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1516	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

252066	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7303	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

252067	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1452	2011-11-24 11:00	2010-07-25	Show	GitHub Exploit DB Packet Storm

252068	10	危険	トレンドマイクロ IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ターボリナックスオラクルレッドハット	-	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2412	2011-11-24 10:57	2009-08-6	Show	GitHub Exploit DB Packet Storm

252069	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache httpd の mod_deflate モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1891	2011-11-24 10:54	2009-07-10	Show	GitHub Exploit DB Packet Storm

252070	4.3	警告	IBM	-	IBM Lotus Mobile Connect におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4465	2011-11-22 16:26	2011-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281871	-	coles_credit_cards	coles_credit_card_app	The Coles Credit Card App (aka au.com.colesfinancialservices.mobile) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spo…	CWE-310 Cryptographic Issues	CVE-2014-5562	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281872	-	devarai	word_search_free	The Word Search Free (aka air.wordSearchFree) application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sen…	CWE-310 Cryptographic Issues	CVE-2014-5561	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281873	-	mdickie	popscene	The Popscene (Music Industry Sim) (aka air.Popscene) application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob…	CWE-310 Cryptographic Issues	CVE-2014-5560	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281874	-	josiane_sauveterre	goldfish_care	The Kids GoldFish Care (aka air.josiane.sauveterre.kidsgoldfishcare) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spo…	CWE-310 Cryptographic Issues	CVE-2014-5559	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281875	-	mdickie	hard_time	The Hard Time (Prison Sim) (aka air.HardTime) application 1.111 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain s…	CWE-310 Cryptographic Issues	CVE-2014-5558	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281876	-	commerce	america\'s_economy_for_phone	The America's Economy for Phone (aka air.gov.census.mobile.phone.americaseconomy) application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle att…	CWE-310 Cryptographic Issues	CVE-2014-5557	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281877	-	flyfishing-and-flytying	fly_fishing_\&_fly_tying	The Fly Fishing & Fly Tying (aka air.com.yudu.ReaderAIR3209899) application 3.21.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s…	CWE-310 Cryptographic Issues	CVE-2014-5556	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281878	-	ilearnwith	counting_\&_addition_kids_games	The Counting & Addition Kids Games (aka air.com.tribalnova.ilearnwith.ipad.PokoAddEn) application 1.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle…	CWE-310 Cryptographic Issues	CVE-2014-5555	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281879	-	ilearnwith	fun_preschool_creativity_game	The Fun Preschool Creativity Game (aka air.com.tribalnova.ilearnwith.ipad.MotherAppEn) application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middl…	CWE-310 Cryptographic Issues	CVE-2014-5554	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

281880	-	ilearnwith	kids_preschool_learning_games	The Kids Preschool Learning Games (aka air.com.tribalnova.ilearnwith.ipad.App3En) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle att…	CWE-310 Cryptographic Issues	CVE-2014-5553	2024-11-21 11:12	2014-09-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed