Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
190051 9.1 緊急
Network
Simple project - SimpleXML における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2017-1000190 2017-12-8 16:49 2017-11-17 Show GitHub Exploit DB Packet Storm
190052 6.1 警告
Network
Phoenix team - Phoenix Framework におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2017-1000163 2017-12-8 16:49 2017-03-15 Show GitHub Exploit DB Packet Storm
190053 9.8 緊急
Network
XRootD project - XRootD におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2017-1000215 2017-12-8 16:49 2017-04-20 Show GitHub Exploit DB Packet Storm
190054 9.8 緊急
Network
procmail project - procmail におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-16844 2017-12-8 16:47 2017-11-19 Show GitHub Exploit DB Packet Storm
190055 8.8 重要
Network
OTRS プロジェクト
Debian
- Open Ticket Request System における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理
CVE-2017-15864 2017-12-8 16:46 2017-11-14 Show GitHub Exploit DB Packet Storm
190056 5.3 警告
Local
Sergei Pleis - PSFTPd における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理
CVE-2017-15272 2017-12-8 16:29 2017-11-7 Show GitHub Exploit DB Packet Storm
190057 5.9 警告
Network
Sergei Pleis - PSFTPd における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-15271 2017-12-8 16:29 2017-11-7 Show GitHub Exploit DB Packet Storm
190058 5.3 警告
Network
Sergei Pleis - PSFTPd における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-15270 2017-12-8 16:29 2017-11-7 Show GitHub Exploit DB Packet Storm
190059 4.3 警告
Network
Sergei Pleis - PSFTPd におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2017-15269 2017-12-8 16:29 2017-11-7 Show GitHub Exploit DB Packet Storm
190060 7.5 重要
Network
jQueryFileTree project - jqueryFileTree におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-1000170 2017-12-8 16:17 2017-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2511 8.8 HIGH
Network
google chrome Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process mem… CWE-416
 Use After Free
CVE-2026-11071 2026-06-9 00:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2512 7.8 HIGH
Local
google chrome Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: Medium) CWE-416
 Use After Free
CVE-2026-11072 2026-06-9 00:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2513 6.5 MEDIUM
Network
google chrome Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security s… CWE-416
 Use After Free
CVE-2026-11073 2026-06-9 00:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2514 6.5 MEDIUM
Network
google chrome Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security … CWE-125
Out-of-bounds Read
CVE-2026-11075 2026-06-9 00:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2515 6.5 MEDIUM
Network
google chrome Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML p… CWE-20
CWE-284
 Improper Input Validation 
Improper Access Control
CVE-2026-11078 2026-06-9 00:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2516 6.5 MEDIUM
Network
google chrome Inappropriate implementation in Printing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. … CWE-20
 Improper Input Validation 
CVE-2026-11093 2026-06-9 00:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2517 9.6 CRITICAL
Network
google chrome Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT… CWE-416
 Use After Free
CVE-2026-11094 2026-06-9 00:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2518 9.9 CRITICAL
Network
termix termix Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in Termix is v… CWE-78
OS Command 
CVE-2026-45744 2026-06-9 00:25 2026-06-6 Show GitHub Exploit DB Packet Storm
2519 9.6 CRITICAL
Network
guardrailsai guardrails_ai Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. … CWE-506
 Embedded Malicious Code
CVE-2026-45758 2026-06-9 00:22 2026-06-6 Show GitHub Exploit DB Packet Storm
2520 7.8 HIGH
Local
bitdefender napoca Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios_handlers.c. The handler comput… CWE-787
 Out-of-bounds Write
CVE-2026-10046 2026-06-9 00:18 2026-06-3 Show GitHub Exploit DB Packet Storm