Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
190351 8.8 重要
Network
PHPSUGAR - PHPSUGAR PHP Melody における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-15578 2017-11-15 11:04 2017-10-3 Show GitHub Exploit DB Packet Storm
190352 5.6 警告
Network
ProMinent - ProMinent MultiFLEX M10a Controller の Web インターフェースにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-14013 2017-11-15 11:04 2017-10-12 Show GitHub Exploit DB Packet Storm
190353 8.8 重要
Network
ProMinent - ProMinent MultiFLEX M10a Controller の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-14011 2017-11-15 11:04 2017-10-12 Show GitHub Exploit DB Packet Storm
190354 6.5 警告
Network
ProMinent - ProMinent MultiFLEX M10a Controller の Web インターフェースにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-14009 2017-11-15 11:04 2017-10-12 Show GitHub Exploit DB Packet Storm
190355 5.6 警告
Network
ProMinent - ProMinent MultiFLEX M10a Controller の Web インターフェースにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2017-14007 2017-11-15 11:04 2017-10-12 Show GitHub Exploit DB Packet Storm
190356 8.8 重要
Network
ProMinent - ProMinent MultiFLEX M10a Controller の Web インターフェースにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2017-14005 2017-11-15 11:04 2017-10-12 Show GitHub Exploit DB Packet Storm
190357 5.3 警告
Network
CodEasily - WordPress 用 Grand Flagallery プラグインにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2014-8491 2017-11-15 11:04 2014-10-23 Show GitHub Exploit DB Packet Storm
190358 6.2 警告
Local
GNU Project - glibc におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2011-5320 2017-11-15 11:04 2011-09-10 Show GitHub Exploit DB Packet Storm
190359 9.8 緊急
Network
interspire - Interspire Email Marketer における認証に関する脆弱性 CWE-287
不適切な認証
CVE-2017-14322 2017-11-14 18:14 2017-10-17 Show GitHub Exploit DB Packet Storm
190360 7.2 重要
Network
Puppet - Puppet Enterprise および Puppet Agent におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5714 2017-11-14 18:14 2016-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2021 8.8 HIGH
Network
google chrome Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security s… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-11091 2026-06-8 23:34 2026-06-5 Show GitHub Exploit DB Packet Storm
2022 8.8 HIGH
Network
google chrome Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a cra… CWE-602
 Client-Side Enforcement of Server-Side Security
CVE-2026-11092 2026-06-8 23:34 2026-06-5 Show GitHub Exploit DB Packet Storm
2023 9.6 CRITICAL
Network
google chrome Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: M… CWE-416
 Use After Free
CVE-2026-11163 2026-06-8 23:33 2026-06-5 Show GitHub Exploit DB Packet Storm
2024 8.8 HIGH
Network
google chrome Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-11211 2026-06-8 23:33 2026-06-5 Show GitHub Exploit DB Packet Storm
2025 9.8 CRITICAL
Network
amd aiter AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that allows unauthenticate… CWE-502
 Deserialization of Untrusted Data
CVE-2026-49121 2026-06-8 23:29 2026-06-2 Show GitHub Exploit DB Packet Storm
2026 5.3 MEDIUM
Network
google chrome Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory … CWE-125
Out-of-bounds Read
CVE-2026-11004 2026-06-8 23:27 2026-06-5 Show GitHub Exploit DB Packet Storm
2027 6.5 MEDIUM
Network
google chrome Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) CWE-125
Out-of-bounds Read
CVE-2026-11006 2026-06-8 23:27 2026-06-5 Show GitHub Exploit DB Packet Storm
2028 9.6 CRITICAL
Network
google chrome Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) CWE-416
 Use After Free
CVE-2026-11009 2026-06-8 23:27 2026-06-5 Show GitHub Exploit DB Packet Storm
2029 8.3 HIGH
Network
google chrome Use after free in WebShare in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted … CWE-416
 Use After Free
CVE-2026-11010 2026-06-8 23:26 2026-06-5 Show GitHub Exploit DB Packet Storm
2030 8.3 HIGH
Network
google chrome Use after free in Serial in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT… CWE-416
 Use After Free
CVE-2026-11012 2026-06-8 23:26 2026-06-5 Show GitHub Exploit DB Packet Storm