Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217621 5.4 警告 freshdirect - Android 用 FreshDirect アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-6000 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217622 5.4 警告 telenavsoftware - Android 用 autonavi アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5999 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217623 5.4 警告 skydrive assistant project - Android 用 SkyDrive Assistant アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5998 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217624 5.4 警告 autotrader.co.za - Android 用 Auto Trader アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5997 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217625 5.4 警告 gebrauchtwagenreport - Android 用 DEKRA Used Car Report アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5996 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217626 5.4 警告 ericpol - Android 用 eWUS mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5995 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217627 5.4 警告 ding - Android 用 ding* ezetop. Top-up Any Phone アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5994 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217628 5.4 警告 preplaysports - Android 用 MLB Preplay アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5993 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217629 5.4 警告 successsecrets - Android 用 successsecrets アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5992 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
217630 5.4 警告 skin conditions and diseases project - Android 用 Skin Conditions and Diseases アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5991 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 5.4 MEDIUM
Network
google chrome Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low) CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-11232 2026-06-11 04:11 2026-06-5 Show GitHub Exploit DB Packet Storm
1002 8.8 HIGH
Network
google chrome Use after free in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low) CWE-416
 Use After Free
CVE-2026-11230 2026-06-11 04:09 2026-06-5 Show GitHub Exploit DB Packet Storm
1003 6.1 MEDIUM
Physics
google chrome Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. (Chromium security sever… CWE-269
 Improper Privilege Management
CVE-2026-11229 2026-06-11 04:09 2026-06-5 Show GitHub Exploit DB Packet Storm
1004 9.8 CRITICAL
Network
- - In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.3 and 10.2.2510.14, an unauthenticated user could create or truncate arbitrary files through … CWE-306
Missing Authentication for Critical Function
CVE-2026-20253 2026-06-11 03:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1005 5.7 MEDIUM
Network
- - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… CWE-20
 Improper Input Validation 
CVE-2026-20255 2026-06-11 03:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1006 7.1 HIGH
Network
- - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… CWE-79
Cross-site Scripting
CVE-2026-20258 2026-06-11 03:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1007 4.3 MEDIUM
Network
- - In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute (ANSI) escape codes into SOAR ap… CWE-117
 Improper Output Neutralization for Logs
CVE-2026-20260 2026-06-11 03:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1008 8.8 HIGH
Network
- - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers… CWE-502
 Deserialization of Untrusted Data
CVE-2026-20251 2026-06-11 03:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1009 7.6 HIGH
Network
- - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privile… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-20252 2026-06-11 03:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1010 5.7 MEDIUM
Network
- - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… CWE-20
 Improper Input Validation 
CVE-2026-20254 2026-06-11 03:36 2026-06-11 Show GitHub Exploit DB Packet Storm