Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
191401	6.1	警告 Network	PHPJabbers	-	Rate Me におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-15384	2017-11-2 17:59	2017-10-16	Show	GitHub Exploit DB Packet Storm

191402	7.8	重要 Local	radare	-	radare2 におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15385	2017-11-2 17:54	2017-10-15	Show	GitHub Exploit DB Packet Storm

191403	6.1	警告 Network	FlowPaper project	-	FlexPaper におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-9677	2017-11-2 17:50	2014-12-23	Show	GitHub Exploit DB Packet Storm

191404	6	警告 Local	Xen プロジェクト	-	Xen におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2017-15596	2017-11-2 16:57	2017-08-23	Show	GitHub Exploit DB Packet Storm

191405	8.8	重要 Local	Xen プロジェクト	-	Xen におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2017-15595	2017-11-2 16:57	2017-10-12	Show	GitHub Exploit DB Packet Storm

191406	8.8	重要 Local	Xen プロジェクト	-	Xen におけるデータ処理に関する脆弱性	CWE-19 データ処理	CVE-2017-15594	2017-11-2 16:57	2017-10-12	Show	GitHub Exploit DB Packet Storm

191407	6.5	警告 Local	Xen プロジェクト	-	Xen におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15593	2017-11-2 16:56	2017-10-12	Show	GitHub Exploit DB Packet Storm

191408	8.8	重要 Local	Xen プロジェクト	-	Xen における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-15592	2017-11-2 16:56	2017-10-12	Show	GitHub Exploit DB Packet Storm

191409	5.4	警告 Network	The Foreman	-	Foreman におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3531	2017-11-2 16:56	2014-07-28	Show	GitHub Exploit DB Packet Storm

191410	7.8	重要 Local	Artifex Software	-	Artifex MuPDF における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2017-15587	2017-11-2 16:35	2017-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2931	9.6	CRITICAL Network	google	chrome	Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)	CWE-416 Use After Free	CVE-2026-10886	2026-06-6 02:42	2026-06-5	Show	GitHub Exploit DB Packet Storm

2932	8.8	HIGH Network	google	chrome	Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)	CWE-416 Use After Free	CVE-2026-10885	2026-06-6 02:42	2026-06-5	Show	GitHub Exploit DB Packet Storm

2933	8.3	HIGH Network	google	chrome	Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page…	CWE-416 Use After Free	CVE-2026-10884	2026-06-6 02:41	2026-06-5	Show	GitHub Exploit DB Packet Storm

2934	8.8	HIGH Network	google	chrome	Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)	CWE-787 Out-of-bounds Write	CVE-2026-10883	2026-06-6 02:41	2026-06-5	Show	GitHub Exploit DB Packet Storm

2935	8.8	HIGH Network	google	chrome	Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)	CWE-416 Use After Free	CVE-2026-10882	2026-06-6 02:41	2026-06-5	Show	GitHub Exploit DB Packet Storm

2936	5.3	MEDIUM Network	strawberry	strawberry_graphql	Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative/amplification effe…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47707	2026-06-6 02:38	2026-06-5	Show	GitHub Exploit DB Packet Storm

2937	5.3	MEDIUM Network	strawberry	strawberry_graphql	Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter extension is vulnerable to an Application-level DOS due to a lack of cycle detecti…	CWE-400 CWE-674 Uncontrolled Resource Consumption Uncontrolled Recursion	CVE-2026-47706	2026-06-6 02:37	2026-06-5	Show	GitHub Exploit DB Packet Storm

2938	7.3	HIGH Network	rurban	cpanel\	Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into an array reference…	CWE-843 Type Confusion	CVE-2026-9334	2026-06-6 02:36	2026-06-3	Show	GitHub Exploit DB Packet Storm

2939	7.5	HIGH Network	rurban	cpanel\	Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decode_json() advances t…	CWE-755 CWE-763 Improper Handling of Exceptional Conditions Release of Invalid Pointer or Reference	CVE-2026-9516	2026-06-6 02:35	2026-06-3	Show	GitHub Exploit DB Packet Storm

2940	-		-	-	A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error…	CWE-20 Improper Input Validation	CVE-2026-8714	2026-06-6 02:17	2026-06-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed