Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216151 6.8 警告 アップル - Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1311 2014-11-20 09:44 2014-04-1 Show GitHub Exploit DB Packet Storm
216152 7.5 危険 アップル
Google
- Google Chrome で使用される Blink の SVG の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6663 2014-11-20 09:44 2013-11-5 Show GitHub Exploit DB Packet Storm
216153 6.8 警告 アップル
Google
- Google Chrome で使用される Blink の editing の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6635 2014-11-20 09:43 2013-12-4 Show GitHub Exploit DB Packet Storm
216154 6.8 警告 アップル - Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1310 2014-11-20 09:43 2014-04-1 Show GitHub Exploit DB Packet Storm
216155 6.8 警告 アップル - Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1389 2014-11-20 09:43 2014-08-13 Show GitHub Exploit DB Packet Storm
216156 6.8 警告 アップル
Google
- Google Chrome で使用される Blink の core/dom/ContainerNode.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6625 2014-11-20 09:43 2013-11-12 Show GitHub Exploit DB Packet Storm
216157 6.8 警告 アップル - Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1309 2014-11-20 09:42 2014-04-1 Show GitHub Exploit DB Packet Storm
216158 6.8 警告 アップル - Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-5228 2014-11-20 09:42 2013-12-16 Show GitHub Exploit DB Packet Storm
216159 6.8 警告 アップル - Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1390 2014-11-20 09:42 2014-08-13 Show GitHub Exploit DB Packet Storm
216160 6.8 警告 アップル - Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1308 2014-11-20 09:42 2014-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294621 - prestashop prestashop
ebay_module
The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-th… CWE-20
 Improper Input Validation 
CVE-2012-5800 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294622 - prestashop
presto-changeo
prestashop
canadapost
The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate… CWE-20
 Improper Input Validation 
CVE-2012-5799 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294623 - paypal
oscommerce
payflow_pro_express_checkout
oscommerce
The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which… CWE-20
 Improper Input Validation 
CVE-2012-5798 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294624 - brian_burton
oscommerce
paypal_pro_payflow_module
oscommerce
The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which al… CWE-20
 Improper Input Validation 
CVE-2012-5797 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294625 - paypal
oscommerce
paypal_pro
oscommerce
The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man… CWE-20
 Improper Input Validation 
CVE-2012-5796 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294626 - akunamachata
oscommerce
paypal_express_module
oscommerce
The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows… CWE-20
 Improper Input Validation 
CVE-2012-5795 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294627 - moneybookers
oscommerce
moneybookers
oscommerce
The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m… CWE-20
 Improper Input Validation 
CVE-2012-5794 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294628 - oscommerce
harald_ponce_de_leon
oscommerce
authorize.net
The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows … CWE-20
 Improper Input Validation 
CVE-2012-5793 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294629 - oscommerce
sagepay
oscommerce
sage_pay_direct_module
The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allow… CWE-20
 Improper Input Validation 
CVE-2012-5792 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
294630 - paypal invoicing PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta… CWE-20
 Improper Input Validation 
CVE-2012-5791 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm