Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190291 7.5 重要
Network 		Mahara - Mahara における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-1000133 2017-11-15 19:31 2017-11-3 Show GitHub Exploit DB Packet Storm
190292 6.5 警告
Network 		Mahara - Mahara における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-1000131 2017-11-15 19:31 2017-11-3 Show GitHub Exploit DB Packet Storm
190293 5.4 警告
Network 		IBM - IBM Team Concert におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-1363 2017-11-15 18:14 2017-10-20 Show GitHub Exploit DB Packet Storm
190294 4.3 警告
Network 		IBM - IBM CLM アプリケーションの RSA DM における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-1295 2017-11-15 18:14 2017-10-20 Show GitHub Exploit DB Packet Storm
190295 6.5 警告
Network 		3CX - 3CX Phone System におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-15359 2017-11-15 18:05 2017-10-16 Show GitHub Exploit DB Packet Storm
190296 8.8 重要
Network 		DELL EMC (旧 EMC Corporation) - EMC Data Protection Advisor における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-10955 2017-11-15 17:45 2017-09-28 Show GitHub Exploit DB Packet Storm
190297 8.8 重要
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Cloud Foundry Runtime cf-release などの製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2015-5173 2017-11-15 17:29 2015-07-1 Show GitHub Exploit DB Packet Storm
190298 9.8 緊急
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Cloud Foundry Runtime cf-release などの製品におけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2015-5172 2017-11-15 17:29 2015-07-1 Show GitHub Exploit DB Packet Storm
190299 9.8 緊急
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Cloud Foundry Runtime cf-release などの製品におけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2015-5171 2017-11-15 17:29 2015-07-1 Show GitHub Exploit DB Packet Storm
190300 8.8 重要
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Cloud Foundry Runtime cf-release などの製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-5170 2017-11-15 17:29 2015-07-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1971 8.8 HIGH
Network 		google chrome Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free 		CVE-2026-10882 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
1972 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative/amplification effe… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-47707 2026-06-6 02:38 2026-06-5 Show GitHub Exploit DB Packet Storm
1973 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter extension is vulnerable to an Application-level DOS due to a lack of cycle detecti… CWE-400
CWE-674
 Uncontrolled Resource Consumption
 Uncontrolled Recursion 		CVE-2026-47706 2026-06-6 02:37 2026-06-5 Show GitHub Exploit DB Packet Storm
1974 7.3 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into an array reference… CWE-843
Type Confusion 		CVE-2026-9334 2026-06-6 02:36 2026-06-3 Show GitHub Exploit DB Packet Storm
1975 7.5 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decode_json() advances t… CWE-755
CWE-763
 Improper Handling of Exceptional Conditions
 Release of Invalid Pointer or Reference 		CVE-2026-9516 2026-06-6 02:35 2026-06-3 Show GitHub Exploit DB Packet Storm
1976 - - - A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input.  Crafted inputs can trigger a processing error… CWE-20
 Improper Input Validation  		CVE-2026-8714 2026-06-6 02:17 2026-06-6 Show GitHub Exploit DB Packet Storm
1977 4.3 MEDIUM
Network 		- - A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected by this vulnerability is an unknown func… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-11337 2026-06-6 02:16 2026-06-6 Show GitHub Exploit DB Packet Storm
1978 9.6 CRITICAL
Network 		- - Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape… CWE-20
 Improper Input Validation  		CVE-2026-11095 2026-06-6 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1979 9.6 CRITICAL
Network 		- - Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (… CWE-472
CWE-190
 External Control of Assumed-Immutable Web Parameter
 Integer Overflow or Wraparound 		CVE-2026-11088 2026-06-6 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1980 8.8 HIGH
Network 		- - Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted H… CWE-416
 Use After Free 		CVE-2026-11042 2026-06-6 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm