Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258071 4.3 警告 Google - Google Chrome の getSVGDocument メソッドにおけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3264 2010-10-19 15:00 2009-09-15 Show GitHub Exploit DB Packet Storm
258072 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3263 2010-10-19 14:59 2009-09-15 Show GitHub Exploit DB Packet Storm
258073 4.3 警告 Google - Google Chrome における data: URI をブロックしない脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3011 2010-10-19 14:59 2009-02-3 Show GitHub Exploit DB Packet Storm
258074 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-2974 2010-10-19 14:59 2009-02-3 Show GitHub Exploit DB Packet Storm
258075 6.4 警告 Google - Google Chrome における任意の HTTPS サーバになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2973 2010-10-19 14:59 2009-08-25 Show GitHub Exploit DB Packet Storm
258076 10 危険 Google - Google Chrome にて使用される Google V8 における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2935 2010-10-19 14:58 2009-08-25 Show GitHub Exploit DB Packet Storm
258077 4.3 警告 Google - Google Chrome の tooltip manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-7061 2010-10-19 14:58 2009-08-24 Show GitHub Exploit DB Packet Storm
258078 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-2955 2010-10-19 14:58 2009-08-24 Show GitHub Exploit DB Packet Storm
258079 5.8 警告 Google - Google Chrome における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2060 2010-10-19 14:57 2009-03-23 Show GitHub Exploit DB Packet Storm
258080 9.3 危険 Google - Google Chrome の chrome/common/gfx/url_elider.cc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-6998 2010-10-19 14:57 2009-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268201 7.5 HIGH
Network
haxx curl curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong ho… - CVE-2016-8625 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268202 7.5 HIGH
Network
haxx curl A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure. - CVE-2016-8623 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268203 9.8 CRITICAL
Network
haxx curl The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input. CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound
CVE-2016-8620 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268204 9.8 CRITICAL
Network
haxx curl The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. CWE-415
 Double Free
CVE-2016-8619 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268205 5.9 MEDIUM
Network
haxx curl A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an u… CWE-255
Credentials Management
CVE-2016-8616 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268206 7.5 HIGH
Network
haxx curl A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookie… - CVE-2016-8615 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268207 7.5 HIGH
Network
haxx curl The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short. CWE-125
Out-of-bounds Read
CVE-2016-8621 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268208 7.0 HIGH
Local
haxx curl The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`. - CVE-2016-8617 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268209 7.5 HIGH
Network
haxx curl curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different ho… - CVE-2016-8624 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
268210 9.8 CRITICAL
Network
haxx libcurl The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than … CWE-787
 Out-of-bounds Write
CVE-2016-8622 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm