Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216801 6.5 警告 Digium - Asterisk および Certified Asterisk の ConfBridge における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8417 2014-11-26 15:59 2014-11-20 Show GitHub Exploit DB Packet Storm
216802 5 警告 Digium - Asterisk Open Source の PJSIP チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-8416 2014-11-26 15:58 2014-11-20 Show GitHub Exploit DB Packet Storm
216803 5 警告 Digium - Asterisk Open Source の chan_pjsip チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-8415 2014-11-26 15:58 2014-11-20 Show GitHub Exploit DB Packet Storm
216804 5 警告 Digium - Asterisk および Certified Asterisk の ConfBridge におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-8414 2014-11-26 15:58 2014-11-20 Show GitHub Exploit DB Packet Storm
216805 7.5 危険 Digium - Asterisk Open Source の res_pjsip_acl モジュールにおける PJSIP ACL ルールを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8413 2014-11-26 15:57 2014-11-20 Show GitHub Exploit DB Packet Storm
216806 5 警告 Digium - Asterisk Open Source および Certified Asterisk における ACL 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8412 2014-11-26 15:57 2014-11-20 Show GitHub Exploit DB Packet Storm
216807 4.3 警告 jQuery - jQuery UI の Tooltip ウィジェットの jquery.ui.tooltip.js のデフォルトコンテンツオプションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6662 2014-11-26 15:50 2012-11-27 Show GitHub Exploit DB Packet Storm
216808 3.5 注意 Liferay - Liferay Portal Enterprise Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8349 2014-11-26 15:27 2014-11-14 Show GitHub Exploit DB Packet Storm
216809 7.1 危険 Xen プロジェクト - Xen の arch/x86/mm.c 内の do_mmu_update 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-9030 2014-11-26 15:20 2014-11-20 Show GitHub Exploit DB Packet Storm
216810 4 警告 MantisBT Group - MantisBT における $g_download_attachments_threshold および $g_view_attachments_threshold の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8988 2014-11-26 13:46 2014-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 6.5 MEDIUM
Network
- - Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: … New CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-11215 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
252 6.5 MEDIUM
Network
- - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity:… New CWE-346
CWE-352
 Origin Validation Error
 Origin Validation Error
CVE-2026-11214 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
253 9.6 CRITICAL
Network
- - Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox … New CWE-20
 Improper Input Validation 
CVE-2026-11213 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
254 4.3 MEDIUM
Network
- - Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted C… New CWE-284
Improper Access Control
CVE-2026-11212 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
255 6.5 MEDIUM
Network
- - Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. (Chromium security sever… New CWE-284
Improper Access Control
CVE-2026-11210 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
256 6.5 MEDIUM
Network
- - Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from p… New CWE-200
Information Exposure
CVE-2026-11209 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
257 9.6 CRITICAL
Network
- - Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromi… New CWE-20
 Improper Input Validation 
CVE-2026-11207 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
258 5.5 MEDIUM
Local
ni ni-pal Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability aff… New CWE-476
 NULL Pointer Dereference
CVE-2026-8035 2026-06-6 00:11 2026-06-3 Show GitHub Exploit DB Packet Storm
259 7.8 HIGH
Local
ni ni-pal Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and p… New CWE-1285
 Improper Validation of Specified Index, Position, or Offset in Input
CVE-2026-8036 2026-06-6 00:10 2026-06-3 Show GitHub Exploit DB Packet Storm
260 - - - Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_shells` as the approved shell list that customers may assign to FTP users. However… New CWE-863
 Incorrect Authorization
CVE-2026-41235 2026-06-6 00:09 2026-06-5 Show GitHub Exploit DB Packet Storm