Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252021 6.8 警告 Google - Linux 上で稼働する Google Chrome のサンドボックス実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4041 2011-01-26 13:26 2010-10-19 Show GitHub Exploit DB Packet Storm
252022 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-4040 2011-01-26 13:23 2010-10-19 Show GitHub Exploit DB Packet Storm
252023 7.5 危険 Google - Linux 上で稼働する Google Chrome における脆弱性 CWE-DesignError
CWE-noinfo
CVE-2010-4039 2011-01-26 13:17 2010-10-19 Show GitHub Exploit DB Packet Storm
252024 4.3 警告 Google - Google Chrome の Web Sockets 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4038 2011-01-26 13:12 2010-10-19 Show GitHub Exploit DB Packet Storm
252025 4.3 警告 Google - Google Chrome におけるポップアップブロッカーを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4037 2011-01-26 13:10 2010-10-19 Show GitHub Exploit DB Packet Storm
252026 6.8 警告 Google - Google Chrome における URL をなりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4036 2011-01-26 13:08 2010-10-19 Show GitHub Exploit DB Packet Storm
252027 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4035 2011-01-26 13:06 2010-10-19 Show GitHub Exploit DB Packet Storm
252028 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4034 2011-01-26 13:04 2010-10-19 Show GitHub Exploit DB Packet Storm
252029 5 警告 Google - Google Chrome におけるプロファイルスパム攻撃を誘導される脆弱性 CWE-Other
その他 		CVE-2010-4033 2011-01-26 13:01 2010-10-19 Show GitHub Exploit DB Packet Storm
252030 9.3 危険 Google - WebKit の WebCore 内にある toAlphabetic 関数における一つずれ (off-by-one) エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1773 2011-01-26 12:59 2010-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284491 - metaclassy byword The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5725 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
284492 - cdsincdesign simple_dropbox_upload_form Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executab… NVD-CWE-Other
CVE-2013-5963 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
284493 - envato complete_gallery_manager_plugin Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uplo… NVD-CWE-Other
CVE-2013-5962 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
284494 - danny_morris lazy_seo Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a… NVD-CWE-Other
CVE-2013-5961 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
284495 - adcisolutions node_view_permissions The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive information by rea… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5965 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
284496 - joachim_noreiko flag_module Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to in… CWE-79
Cross-site Scripting 		CVE-2013-5964 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
284497 - owasp enterprise_security_api The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serial… CWE-310
Cryptographic Issues 		CVE-2013-5960 2024-11-21 10:58 2013-10-1 Show GitHub Exploit DB Packet Storm
284498 - bluecoat proxysgos
proxysg 		Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumption and dropped connections) via a recursive href in an HTML… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5959 2024-11-21 10:58 2013-09-29 Show GitHub Exploit DB Packet Storm
284499 - graphite_project graphite Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-5943 2024-11-21 10:58 2013-09-27 Show GitHub Exploit DB Packet Storm
284500 - graphite_project graphite Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) st… CWE-94
Code Injection 		CVE-2013-5942 2024-11-21 10:58 2013-09-27 Show GitHub Exploit DB Packet Storm