Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219871 7.5 危険 Google - Google Chrome の net/base/escape.cc の UnescapeURLWithOffsetsImpl 関数における URL を偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2014-1723 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219872 7.5 危険 Google - Google Chrome のソフトウェアコンポジタにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-1718 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219873 5 警告 Google - Google Chrome で使用される Blink の wtf/text/Base64.cpp の base64DecodeInternal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-1725 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219874 7.5 危険 Google - Google Chrome で使用される Blink の core/rendering/RenderBlock.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-1722 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219875 4.3 警告 Google - Google Chrome の drag の実装における同一生成元ポリシーを回避される脆弱性 CWE-DesignError
CVE-2014-1726 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219876 7.5 危険 Google - Google Chrome の content/renderer/renderer_webcolorchooser_impl.h におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-1727 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219877 7.5 危険 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2014-1717 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219878 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-1728 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219879 7.5 危険 Google - Google Chrome で使用される Google V8 の runtime.cc におけるクロスサイトスクリプティングの脆弱性 CWE-94
コード・インジェクション
CVE-2014-1716 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
219880 7.5 危険 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2014-1721 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293291 6.1 MEDIUM
Network
fortinet fortiweb Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) redir or (2) mkey parameter to waf/pcre_expressi… CWE-79
Cross-site Scripting
CVE-2012-6346 2024-11-21 10:46 2018-02-10 Show GitHub Exploit DB Packet Storm
293292 6.1 MEDIUM
Network
jquery jquery jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery… CWE-79
Cross-site Scripting
CVE-2012-6708 2024-11-21 10:46 2018-01-19 Show GitHub Exploit DB Packet Storm
293293 6.1 MEDIUM
Network
dragonbyte-tech vbdownloads_module Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbi… CWE-79
Cross-site Scripting
CVE-2012-6682 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293294 6.1 MEDIUM
Network
dragonbyte-tech forumon_rpg_module Multiple cross-site scripting (XSS) vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attacker… CWE-79
Cross-site Scripting
CVE-2012-6671 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293295 6.1 MEDIUM
Network
dragonbyte-tech vbactivity_module Multiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the r… CWE-79
Cross-site Scripting
CVE-2012-6670 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293296 6.1 MEDIUM
Network
dragonbyte-tech vbshout_module Multiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module before 6.0.6 for vBulletin allow remote attackers to inject arbitrary web script… CWE-79
Cross-site Scripting
CVE-2012-6668 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293297 6.1 MEDIUM
Network
dragonbyte-tech vbshout Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter … CWE-79
Cross-site Scripting
CVE-2012-6667 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293298 7.5 HIGH
Network
wordpress wordpress WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. NOTE: the approach… CWE-326
Inadequate Encryption Strength
CVE-2012-6707 2024-11-21 10:46 2017-10-20 Show GitHub Exploit DB Packet Storm
293299 9.8 CRITICAL
Network
inspircd inspircd inspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-1836. CWE-20
 Improper Input Validation 
CVE-2012-6696 2024-11-21 10:46 2017-09-26 Show GitHub Exploit DB Packet Storm
293300 9.8 CRITICAL
Network
sophos
rarlab
threat_detection_engine
unrar
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. … CWE-190
 Integer Overflow or Wraparound
CVE-2012-6706 2024-11-21 10:46 2017-06-22 Show GitHub Exploit DB Packet Storm