Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199761 9.8 緊急
Network
libxpm project - libXpm における整数オーバーフローの脆弱性 CWE-119
CWE-190
CWE-787
CVE-2016-10164 2017-03-9 11:29 2016-12-12 Show GitHub Exploit DB Packet Storm
199762 5.9 警告
Network
ChatSecure
Zom
- ChatSecure および Zom の複数の XMPP クライアントの "XEP-0280: Message Carbons" の実装における連絡先を含むユーザになりすまされる脆弱性 CWE-20
CWE-346
CVE-2017-5590 2017-03-8 19:10 2017-01-24 Show GitHub Exploit DB Packet Storm
199763 6.1 警告
Network
Visonic - Visonic PowerLink2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5811 2017-03-8 19:06 2016-12-13 Show GitHub Exploit DB Packet Storm
199764 9.8 緊急
Network
OmniMetrix, LLC - OmniMetrix OmniView Web アプリケーションにおけるアクセス権を取得される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5801 2017-03-8 19:02 2016-12-15 Show GitHub Exploit DB Packet Storm
199765 7.5 重要
Network
OmniMetrix, LLC - OmniMetrix OmniView Web アプリケーションにおけるアカウント認証情報が漏えいする脆弱性 CWE-200
情報漏えい
CVE-2016-5786 2017-03-8 19:02 2016-12-15 Show GitHub Exploit DB Packet Storm
199766 9.8 緊急
Network
Lynxspring - Lynxspring JENEsys BAS Bridge におけるアプリケーションのデータベースにおいて認証情報の保護に十分なセーフガードが欠落している脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-8378 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
199767 8.8 重要
Network
Lynxspring - Lynxspring JENEsys BAS Bridge におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-8369 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
199768 8.6 重要
Network
Lynxspring - Lynxspring JENEsys BAS Bridge における認証なしでシステム内に侵入される脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2016-8361 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
199769 7.1 重要
Network
Lynxspring - Lynxspring JENEsys BAS Bridge における読み取り専用アクセスでアプリケーション内にて任意の変更を許可される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8357 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
199770 6.1 警告
Network
Moxa Inc. - 複数の Moxa NPort 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9371 2017-03-8 18:37 2016-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 8.1 HIGH
Network
google chrome Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium security severity: Low) Update CWE-94
Code Injection
CVE-2026-11231 2026-06-8 23:55 2026-06-5 Show GitHub Exploit DB Packet Storm
412 6.5 MEDIUM
Network
google chrome Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium secu… Update CWE-20
 Improper Input Validation 
CVE-2026-11283 2026-06-8 23:55 2026-06-5 Show GitHub Exploit DB Packet Storm
413 6.5 MEDIUM
Network
google chrome Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory vi… Update CWE-457
 Use of Uninitialized Variable
CVE-2026-11057 2026-06-8 23:52 2026-06-5 Show GitHub Exploit DB Packet Storm
414 4.3 MEDIUM
Network
google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privil… Update CWE-602
 Client-Side Enforcement of Server-Side Security
CVE-2026-11062 2026-06-8 23:52 2026-06-5 Show GitHub Exploit DB Packet Storm
415 9.6 CRITICAL
Network
google chrome Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… Update CWE-20
 Improper Input Validation 
CVE-2026-11063 2026-06-8 23:51 2026-06-5 Show GitHub Exploit DB Packet Storm
416 6.5 MEDIUM
Network
google chrome Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security… Update CWE-457
 Use of Uninitialized Variable
CVE-2026-11064 2026-06-8 23:51 2026-06-5 Show GitHub Exploit DB Packet Storm
417 6.5 MEDIUM
Network
google chrome Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security… Update CWE-457
 Use of Uninitialized Variable
CVE-2026-11067 2026-06-8 23:51 2026-06-5 Show GitHub Exploit DB Packet Storm
418 6.5 MEDIUM
Network
google chrome Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Update CWE-457
 Use of Uninitialized Variable
CVE-2026-11101 2026-06-8 23:47 2026-06-5 Show GitHub Exploit DB Packet Storm
419 9.6 CRITICAL
Network
google chrome Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a s… Update CWE-20
 Improper Input Validation 
CVE-2026-11112 2026-06-8 23:47 2026-06-5 Show GitHub Exploit DB Packet Storm
420 9.6 CRITICAL
Network
google chrome Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted … Update CWE-416
 Use After Free
CVE-2026-11114 2026-06-8 23:47 2026-06-5 Show GitHub Exploit DB Packet Storm