Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219511	6.4	警告	WordPress.org	-	WordPress の wp-includes/pluggable.php 内の wp_validate_auth_cookie 関数におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2014-0166	2014-04-11 15:33	2014-04-6	Show	GitHub Exploit DB Packet Storm

219512	4	警告	WordPress.org	-	WordPress における投稿を公開される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0165	2014-04-11 15:32	2014-04-8	Show	GitHub Exploit DB Packet Storm

219513	7.5	危険	Google	-	Google Chrome で使用される Free(b)soft Laboratory Speech Dispatcher におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1724	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

219514	7.5	危険	Google	-	Google Chrome の net/base/escape.cc の UnescapeURLWithOffsetsImpl 関数における URL を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2014-1723	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

219515	7.5	危険	Google	-	Google Chrome のソフトウェアコンポジタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2014-1718	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

219516	5	警告	Google	-	Google Chrome で使用される Blink の wtf/text/Base64.cpp の base64DecodeInternal 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-1725	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

219517	7.5	危険	Google	-	Google Chrome で使用される Blink の core/rendering/RenderBlock.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1722	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

219518	4.3	警告	Google	-	Google Chrome の drag の実装における同一生成元ポリシーを回避される脆弱性	CWE-DesignError	CVE-2014-1726	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

219519	7.5	危険	Google	-	Google Chrome の content/renderer/renderer_webcolorchooser_impl.h におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1727	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

219520	7.5	危険	Google	-	Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-1717	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293691	-	stanislas_rolland	sr_feuser_register	The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.	CWE-200 Information Exposure	CVE-2012-5890	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

293692	-	alex_kellner	powermail	Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-5889	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

293693	-	benjamin_mack	seo_basics	Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-5888	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

293694	-	apache	tomcat	The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with …	CWE-287 Improper Authentication	CVE-2012-5887	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

293695	-	apache	tomcat	The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session …	CWE-287 Improper Authentication	CVE-2012-5886	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

293696	-	apache	tomcat	The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka clien…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5885	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

293697	-	uk-cookie_project	uk-cookie	Cross-site scripting (XSS) vulnerability in the Uk Cookie (aka uk-cookie) plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-5856	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

293698	-	mozilla	bugzilla	The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSO…	CWE-200 Information Exposure	CVE-2012-5884	2024-11-21 10:45	2012-11-16	Show	GitHub Exploit DB Packet Storm

293699	-	mozilla yahoo	bugzilla yui	Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x an…	CWE-79 Cross-site Scripting	CVE-2012-5883	2024-11-21 10:45	2012-11-16	Show	GitHub Exploit DB Packet Storm

293700	-	yahoo	yui	Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploade…	CWE-79 Cross-site Scripting	CVE-2012-5882	2024-11-21 10:45	2012-11-16	Show	GitHub Exploit DB Packet Storm