Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190111 5.6 警告
Network 		ProMinent - ProMinent MultiFLEX M10a Controller の Web インターフェースにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2017-14007 2017-11-15 11:04 2017-10-12 Show GitHub Exploit DB Packet Storm
190112 8.8 重要
Network 		ProMinent - ProMinent MultiFLEX M10a Controller の Web インターフェースにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2017-14005 2017-11-15 11:04 2017-10-12 Show GitHub Exploit DB Packet Storm
190113 5.3 警告
Network 		CodEasily - WordPress 用 Grand Flagallery プラグインにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2014-8491 2017-11-15 11:04 2014-10-23 Show GitHub Exploit DB Packet Storm
190114 6.2 警告
Local 		GNU Project - glibc におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2011-5320 2017-11-15 11:04 2011-09-10 Show GitHub Exploit DB Packet Storm
190115 9.8 緊急
Network 		interspire - Interspire Email Marketer における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2017-14322 2017-11-14 18:14 2017-10-17 Show GitHub Exploit DB Packet Storm
190116 7.2 重要
Network 		Puppet - Puppet Enterprise および Puppet Agent におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-5714 2017-11-14 18:14 2016-10-20 Show GitHub Exploit DB Packet Storm
190117 8.2 重要
Network 		Envitech - Envitech EnviDAS Ultimate における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2017-9625 2017-11-14 17:56 2017-10-12 Show GitHub Exploit DB Packet Storm
190118 7.5 重要
Network 		musl libc - musl libc におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-15650 2017-11-14 17:51 2017-10-18 Show GitHub Exploit DB Packet Storm
190119 7.8 重要
Local 		Linux - Linux Kernel における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2017-15649 2017-11-14 17:51 2017-10-12 Show GitHub Exploit DB Packet Storm
190120 8.8 重要
Network 		Dasan Zhone Solutions - Zhone zNID GPON 2426A における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-8357 2017-11-14 17:41 2014-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2 PUSH_PROMISE authority. In gun_http2:push_promise_frame/7, the :… New CWE-346
 Origin Validation Error 		CVE-2026-43972 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
852 - - - Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gun_http:handle/5,… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-43973 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
853 - - - Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching Prot… New CWE-841
 Improper Enforcement of Behavioral Workflow 		CVE-2026-43974 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
854 - - - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decompression-bomb respo… New CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification) 		CVE-2026-49755 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
855 - - - Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via attacker-influenced part metadata. Req.Utils.encode_form_part/2 … New CWE-93
CRLF Injection 		CVE-2026-49756 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
856 - - - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields… New CWE-113
HTTP Response Splitting 		CVE-2026-43966 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
857 8.8 HIGH
Network 		google chrome Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New CWE-843
Type Confusion 		CVE-2026-11662 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
858 8.3 HIGH
Network 		google chrome Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch… New CWE-416
 Use After Free 		CVE-2026-11663 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
859 8.8 HIGH
Network 		google chrome Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) New CWE-416
 Use After Free 		CVE-2026-11664 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
860 4.3 MEDIUM
Network 		google chrome Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) New CWE-125
Out-of-bounds Read 		CVE-2026-11665 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm