Find a vulnerability

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000050.html",
  "dc:date": "2017-05-23T14:28+09:00",
  "dcterms:issued": "2016-04-19T13:44+09:00",
  "dcterms:modified": "2017-05-23T14:28+09:00",
  "description": "Photopt App provided by NTT Communications Corporation fails to verify SSL server certificates.\r\n\r\nYuto Iso reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000050.html",
  "sec:cpe": {
    "#text": "cpe:/a:ntt:photopt",
    "@product": "Photopt",
    "@vendor": "NTT Communications Corporation",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "4.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "4.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2016-000050",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN11815655/index.html",
      "@id": "JVN#11815655",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1198",
      "@id": "CVE-2016-1198",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-1198",
      "@id": "CVE-2016-1198",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Photopt App fails to verify SSL server certificates"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000049.html",
  "dc:date": "2014-06-23T11:03+09:00",
  "dcterms:issued": "2014-06-17T14:50+09:00",
  "dcterms:modified": "2014-06-23T11:03+09:00",
  "description": "050 plus for Android contains an information management vulnerability.\r\n\r\n050 plus provided by NTT Communications is an IP phone application for smartphones. 050 plus for Android contains an information management vulnerability that outputs some pieces of information stored by the product to a system log file on the device.\r\n\r\nRyo SATO reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000049.html",
  "sec:cpe": {
    "#text": "cpe:/a:ntt:050_plus",
    "@product": "050 plus",
    "@vendor": "NTT Communications Corporation",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "2.6",
    "@severity": "Low",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2014-000049",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN07677464/index.html",
      "@id": "JVN#07677464",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2000",
      "@id": "CVE-2014-2000",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2000",
      "@id": "CVE-2014-2000",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-200",
      "@title": "Information Exposure(CWE-200)"
    }
  ],
  "title": "050 plus for Android information management vulnerability"
}