Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217741	7.5	危険	Google	-	Google Chrome で使用される Free(b)soft Laboratory Speech Dispatcher におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1724	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217742	7.5	危険	Google	-	Google Chrome の net/base/escape.cc の UnescapeURLWithOffsetsImpl 関数における URL を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2014-1723	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217743	7.5	危険	Google	-	Google Chrome のソフトウェアコンポジタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2014-1718	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217744	5	警告	Google	-	Google Chrome で使用される Blink の wtf/text/Base64.cpp の base64DecodeInternal 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-1725	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217745	7.5	危険	Google	-	Google Chrome で使用される Blink の core/rendering/RenderBlock.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1722	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217746	4.3	警告	Google	-	Google Chrome の drag の実装における同一生成元ポリシーを回避される脆弱性	CWE-DesignError	CVE-2014-1726	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217747	7.5	危険	Google	-	Google Chrome の content/renderer/renderer_webcolorchooser_impl.h におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1727	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217748	7.5	危険	Google	-	Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-1717	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217749	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-1728	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

217750	7.5	危険	Google	-	Google Chrome で使用される Google V8 の runtime.cc におけるクロスサイトスクリプティングの脆弱性	CWE-94 コード・インジェクション	CVE-2014-1716	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291941	-	dell	openmanage_server_administrator	Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web scri…	CWE-79 Cross-site Scripting	CVE-2012-4955	2024-11-21 10:43	2012-11-15	Show	GitHub Exploit DB Packet Storm

291942	-	vanillaforums	vanilla_forums vanilla	The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related t…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4954	2024-11-21 10:43	2012-11-15	Show	GitHub Exploit DB Packet Storm

291943	-	verifone	vericentre_web_console	Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalI…	CWE-89 SQL Injection	CVE-2012-4951	2024-11-21 10:43	2012-11-15	Show	GitHub Exploit DB Packet Storm

291944	-	symantec	antivirus scan_engine endpoint_protection	The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4953	2024-11-21 10:43	2012-11-14	Show	GitHub Exploit DB Packet Storm

291945	-	esri	arcgis_server	SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service.	CWE-89 SQL Injection	CVE-2012-4949	2024-11-21 10:43	2012-11-14	Show	GitHub Exploit DB Packet Storm

291946	-	fortinet	fortigate-3140b fortigate-60c fortigate-3040b fortigate-300c fortigate-600c fortigate-5001a-sw fortigate-3240c fortigate-310b fortigate-800c fortigate-5020 fortigate-100…	The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier …	CWE-295 Improper Certificate Validation	CVE-2012-4948	2024-11-21 10:43	2012-11-14	Show	GitHub Exploit DB Packet Storm

291947	-	ibm	websphere_application_server	Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hij…	CWE-352 Origin Validation Error	CVE-2012-4853	2024-11-21 10:43	2012-11-14	Show	GitHub Exploit DB Packet Storm

291948	-	ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.	CWE-79 Cross-site Scripting	CVE-2012-4851	2024-11-21 10:43	2012-11-14	Show	GitHub Exploit DB Packet Storm

291949	-	ibm	websphere_application_server	IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2012-4850	2024-11-21 10:43	2012-11-14	Show	GitHub Exploit DB Packet Storm

291950	-	ibm	cognos_business_intelligence	IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte.	CWE-189 Numeric Errors	CVE-2012-4847	2024-11-21 10:43	2012-11-14	Show	GitHub Exploit DB Packet Storm