Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
190961	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15801	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190962	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15789	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190963	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15788	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190964	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15787	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190965	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15786	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190966	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15785	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190967	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15784	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190968	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15783	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190969	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15782	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

190970	7.8	重要 Local	XnSoft	-	XnView Classic におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15781	2017-10-31 17:36	2017-10-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2461	7.5	HIGH Network	google	chrome	Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome…	CWE-843 Type Confusion	CVE-2026-10022	2026-06-5 11:16	2026-05-29	Show	GitHub Exploit DB Packet Storm

2462	4.7	MEDIUM Local	linaro	op-tee	OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of t…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-45614	2026-06-5 09:20	2026-06-4	Show	GitHub Exploit DB Packet Storm

2463	9.8	CRITICAL Network	acer	predator_connect_w6x_firmware	Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.	CWE-77 Command Injection	CVE-2026-49199	2026-06-5 04:44	2026-05-29	Show	GitHub Exploit DB Packet Storm

2464	9.6	CRITICAL Network	huggingface	transformers	A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-5241	2026-06-5 03:54	2026-06-3	Show	GitHub Exploit DB Packet Storm

2465	6.5	MEDIUM Network	koha	koha	Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-26379	2026-06-5 03:54	2026-06-4	Show	GitHub Exploit DB Packet Storm

2466	8.1	HIGH Network	shopify	react-router	React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through extern…	CWE-502 Deserialization of Untrusted Data	CVE-2026-42211	2026-06-5 03:50	2026-06-3	Show	GitHub Exploit DB Packet Storm

2467	5.4	MEDIUM Network	koha	koha	Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice features	CWE-79 Cross-site Scripting	CVE-2026-26378	2026-06-5 03:49	2026-06-4	Show	GitHub Exploit DB Packet Storm

2468	6.1	MEDIUM Network	shopify	react-router	React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an external domain due to p…	CWE-601 Open Redirect	CVE-2026-40181	2026-06-5 03:46	2026-06-3	Show	GitHub Exploit DB Packet Storm

2469	7.5	HIGH Network	shopify turbo-stream	react-router turbo_stream	React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-34077	2026-06-5 03:45	2026-06-3	Show	GitHub Exploit DB Packet Storm

2470	4.7	MEDIUM Network	shopify	react-router	React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS…	CWE-79 Cross-site Scripting	CVE-2026-33245	2026-06-5 03:43	2026-06-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed