Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218841 6.4 警告 Google - Google Chrome の net/socket/ssl_client_socket_nss.cc における新たな証明書チェーンの使用を誘発される脆弱性 CWE-310
暗号の問題
CVE-2013-6659 2014-02-25 17:32 2013-11-5 Show GitHub Exploit DB Packet Storm
218842 7.5 危険 Google - Google Chrome で使用される Blink のレイアウトの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6658 2014-02-25 17:31 2013-11-5 Show GitHub Exploit DB Packet Storm
218843 6.4 警告 Google - Google Chrome で使用される Blink のクロスサイトスクリプティング監査機能における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6657 2014-02-25 17:30 2013-11-5 Show GitHub Exploit DB Packet Storm
218844 5 警告 Google - Google Chrome で使用される Blink のクロスサイトスクリプティング監査機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-6656 2014-02-25 17:29 2013-11-5 Show GitHub Exploit DB Packet Storm
218845 7.5 危険 Google - Google Chrome で使用される Blink におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6655 2014-02-25 17:27 2013-11-5 Show GitHub Exploit DB Packet Storm
218846 7.5 危険 Google - Google Chrome で使用される Blink の core/svg/SVGAnimateElement.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6654 2014-02-25 17:26 2013-11-5 Show GitHub Exploit DB Packet Storm
218847 7.5 危険 Google - Google Chrome の Web コンテンツ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6653 2014-02-25 17:25 2013-11-5 Show GitHub Exploit DB Packet Storm
218848 7.5 危険 Google - Windows 上で稼働する Google Chrome の sandbox/win/src/named_pipe_dispatcher.cc におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-6652 2014-02-25 17:24 2013-11-5 Show GitHub Exploit DB Packet Storm
218849 10 危険 Belkin International - Belkin WeMo Home Automation ファームウェアにおけるファームウェアアップデートを偽装される脆弱性 CWE-310
CWE-Other
CVE-2013-6952 2014-02-25 15:53 2013-12-4 Show GitHub Exploit DB Packet Storm
218850 7.1 危険 Belkin International - Belkin WeMo Home Automation ファームウェアにおける SSL サーバになりすまされる脆弱性 CWE-310
CWE-Other
CVE-2013-6951 2014-02-25 15:53 2013-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293231 - w1.fi hostapd hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2389 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
293232 - cisco anyconnect_secure_mobility_client A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict … CWE-20
 Improper Input Validation 
CVE-2012-2496 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
293233 - cisco secure_desktop
anyconnect_secure_mobility_client
The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the… CWE-20
 Improper Input Validation 
CVE-2012-2495 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
293234 - cisco anyconnect_secure_mobility_client The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 MR8 does not compare the timestamp of offered software to t… CWE-20
 Improper Input Validation 
CVE-2012-2494 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
293235 - cisco anyconnect_secure_mobility_client The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linu… CWE-20
 Improper Input Validation 
CVE-2012-2493 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
293236 - checkpoint remote_access_clients
endpoint_security
endpoint_connect
endpoint_security_vpn
Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint … NVD-CWE-Other
CVE-2012-2753 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
293237 - wap2 smallpict Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2012-2638 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
293238 - kent-web web_patio Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie. CWE-79
Cross-site Scripting
CVE-2012-2637 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
293239 - kent-web web_patio Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2012-2636 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
293240 - redhat libvirt libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associate… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2693 2024-11-21 10:39 2012-06-17 Show GitHub Exploit DB Packet Storm