Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190081 8.8 重要
Network 		Google - Google Chrome におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-5052 2017-11-15 16:47 2017-03-29 Show GitHub Exploit DB Packet Storm
190082 9.1 緊急
Network 		Debian - Debian ftpsync におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-8805 2017-11-15 16:25 2017-10-17 Show GitHub Exploit DB Packet Storm
190083 9.8 緊急
Network 		CampbellHoffman.com - WordPress 用 Form Manager プラグインにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2015-7806 2017-11-15 16:25 2015-10-12 Show GitHub Exploit DB Packet Storm
190084 9.8 緊急
Network 		NW.js community - nw.js における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2014-9733 2017-11-15 16:25 2014-12-28 Show GitHub Exploit DB Packet Storm
190085 8.8 重要
Network 		X2Engine - X2Engine X2CRM における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2014-2664 2017-11-15 16:25 2014-03-20 Show GitHub Exploit DB Packet Storm
190086 7.1 重要
Local 		Perltidy project - perltidy におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2014-2277 2017-11-15 16:25 2014-03-10 Show GitHub Exploit DB Packet Storm
190087 7.8 重要
Local 		Linux - Linux Kernel における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-15951 2017-11-15 15:28 2017-10-27 Show GitHub Exploit DB Packet Storm
190088 7.8 重要
Local 		GNU Project - GNU Binutils におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-15996 2017-11-15 15:21 2017-10-28 Show GitHub Exploit DB Packet Storm
190089 6.5 警告
Network 		GraphicsMagick - GraphicsMagick における境界外読み取りに関する脆弱性 CWE-125
CWE-200
CVE-2017-16353 2017-11-15 11:56 2017-10-22 Show GitHub Exploit DB Packet Storm
190090 8.8 重要
Network 		GraphicsMagick - GraphicsMagick におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-16352 2017-11-15 11:56 2017-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1371 7.5 HIGH
Network 		- - Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6 packet parser. The parser decrements an unsigned 64-bit payload-length value (taken from the IPv6 fixe… Update CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-49494 2026-06-9 00:03 2026-06-7 Show GitHub Exploit DB Packet Storm
1372 6.5 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informatio… Update CWE-20
 Improper Input Validation  		CVE-2026-11045 2026-06-9 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
1373 8.0 HIGH
Network 		termix termix Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop (Electron) disables TLS certificate validation,… Update CWE-295
Improper Certificate Validation  		CVE-2026-45745 2026-06-9 00:02 2026-06-6 Show GitHub Exploit DB Packet Storm
1374 - - - Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prio… Update CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2026-45409 2026-06-9 00:02 2026-06-6 Show GitHub Exploit DB Packet Storm
1375 6.5 MEDIUM
Network 		google chrome Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium s… Update CWE-472
CWE-190
 External Control of Assumed-Immutable Web Parameter
 Integer Overflow or Wraparound 		CVE-2026-11044 2026-06-9 00:01 2026-06-5 Show GitHub Exploit DB Packet Storm
1376 - - - A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request processi… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-6239 2026-06-9 00:01 2026-06-6 Show GitHub Exploit DB Packet Storm
1377 - - - On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensitivity operations. Due to a logic flaw in the device’s API authorization mechani… Update CWE-287
Improper Authentication 		CVE-2026-34123 2026-06-9 00:01 2026-06-6 Show GitHub Exploit DB Packet Storm
1378 - - - A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion parameters. An authenti… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-6240 2026-06-9 00:01 2026-06-6 Show GitHub Exploit DB Packet Storm
1379 - - - An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without adequate sanitizatio… Update CWE-134
Use of Externally-Controlled Format String 		CVE-2026-6241 2026-06-9 00:01 2026-06-6 Show GitHub Exploit DB Packet Storm
1380 - - - An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper handling of externally supplied parameters within formatting functions. An attacke… Update CWE-134
Use of Externally-Controlled Format String 		CVE-2026-6242 2026-06-9 00:01 2026-06-6 Show GitHub Exploit DB Packet Storm