Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200941	4.3	警告 Network	Google	-	Google Chrome の Histogram における NULL ポインタデリファレンスを引き起こされる脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-5023	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200942	4.3	警告 Network	Google	-	Google Chrome の Blink におけるコンテンツセキュリティポリシーを回避される脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-5022	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200943	6.1	警告 Network	Google	-	Google Chrome における悪意のある拡張機能をインストールされる脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5020	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200944	6.3	警告 Network	Google	-	Google Chrome におけるヒープを破損される脆弱性	CWE-416 解放済みメモリの使用	CVE-2017-5019	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200945	6.5	警告 Network	Google	-	Google Chrome の Blink における制御していないページ上で特定の UI 要素を表示される脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-5016	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200946	6.5	警告 Network	Google	-	Google Chrome におけるドメインを偽装される脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-5015	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200947	6.3	警告 Network	Google	-	Google Chrome の Skia におけるヒープバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-5014	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200948	6.5	警告 Network	Google	-	Google Chrome における Omnibox のコンテンツを偽造される脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-5013	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

200949	8.8	重要 Network	Google	-	Google Chrome の V8 におけるヒープバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-5012	2017-02-22 16:58	2017-01-25	Show	GitHub Exploit DB Packet Storm

200950	6.5	警告 Network	Google	-	Google Chrome におけるファイルシステムのコンテンツを読まれる脆弱性	CWE-200 情報漏えい	CVE-2017-5011	2017-02-22 16:58	2017-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290011	4.4	MEDIUM Local	pen_project opensuse debian	pen opensuse debian_linux	Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2014-2387	2024-11-21 11:06	2019-12-13	Show	GitHub Exploit DB Packet Storm

290012	7.5	HIGH Network	projectfloodlight	open_sdn_controller	A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw i…	CWE-20 Improper Input Validation	CVE-2014-2304	2024-11-21 11:06	2019-10-24	Show	GitHub Exploit DB Packet Storm

290013	8.8	HIGH Network	apereo	cas_server	XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 and 3.5.x before 3.5.2.1, when Google Accounts Integration is enabled, allows rem…	CWE-611 XXE	CVE-2014-2296	2024-11-21 11:06	2018-07-21	Show	GitHub Exploit DB Packet Storm

290014	9.8	CRITICAL Network	webedition	webedition_cms	The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to update.webedition.org.	CWE-94 Code Injection	CVE-2014-2302	2024-11-21 11:06	2018-07-20	Show	GitHub Exploit DB Packet Storm

290015	9.8	CRITICAL Network	brookinsconsulting	collected_information_export	Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2552	2024-11-21 11:06	2018-04-28	Show	GitHub Exploit DB Packet Storm

290016	9.8	CRITICAL Network	openwebanalytics	open_web_analytics	Open Web Analytics (OWA) before 1.5.7 allows remote attackers to conduct PHP object injection attacks via a crafted serialized object in the owa_event parameter to queue.php.	CWE-74 Injection	CVE-2014-2294	2024-11-21 11:06	2018-04-18	Show	GitHub Exploit DB Packet Storm

290017	5.9	MEDIUM Network	oleumtech	ft1_firmware ad1_firmware	OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data.	CWE-200 Information Exposure	CVE-2014-2359	2024-11-21 11:06	2018-04-7	Show	GitHub Exploit DB Packet Storm

290018	5.5	MEDIUM Local	intel	thermald	The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.	CWE-59 Link Following	CVE-2014-2312	2024-11-21 11:06	2018-03-27	Show	GitHub Exploit DB Packet Storm

290019	9.8	CRITICAL Network	zikula	zikula_application_framework	Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary files or execute arbitrary PHP code via crafted serialized data…	CWE-94 Code Injection	CVE-2014-2293	2024-11-21 11:06	2018-03-27	Show	GitHub Exploit DB Packet Storm

290020	6.5	MEDIUM Network	wp-html-sitemap_project	wp-html-sitemap	Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for request…	CWE-352 Origin Validation Error	CVE-2014-2675	2024-11-21 11:06	2018-03-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed