Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218171 7.5 危険 Smarty Pants Plugins - WordPress 用 Smarty Pants Plugins SP Client Document Manager プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9178 2014-12-3 16:07 2014-11-21 Show GitHub Exploit DB Packet Storm
218172 5 警告 SVN Labs Softwares. - WordPress 用 HTML5 MP3 Player with Playlist Free プラグインにおけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2014-9177 2014-12-3 16:07 2014-11-26 Show GitHub Exploit DB Packet Storm
218173 4.3 警告 InstaSqueeze.com - WordPress 用 InstaSqueeze Sexy Squeeze Pages プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9176 2014-12-3 16:06 2014-11-26 Show GitHub Exploit DB Packet Storm
218174 7.5 危険 wpDataTables - WordPress 用 wpDataTables プラグインの wpdatatables.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9175 2014-12-3 16:05 2014-11-22 Show GitHub Exploit DB Packet Storm
218175 4.3 警告 Team Yoast - WordPress 用 Google Analytics by Yoast プラグインおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9174 2014-12-3 16:05 2014-11-26 Show GitHub Exploit DB Packet Storm
218176 7.5 危険 Google Doc Embedder - WordPress 用 Google Doc Embedder プラグインの view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9173 2014-12-3 16:05 2014-11-14 Show GitHub Exploit DB Packet Storm
218177 4.3 警告 Geardev - WordPress 用 Ad-Manager プラグインの track-click.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-8754 2014-12-3 16:04 2014-11-26 Show GitHub Exploit DB Packet Storm
218178 5 警告 Kennziffer.com - TYPO3 用 ke_questionnaire エクステンションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-8874 2014-12-3 15:56 2014-12-1 Show GitHub Exploit DB Packet Storm
218179 5 警告 ZTE - ZTE ZXDSL 831CII における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-9184 2014-12-3 15:55 2014-11-7 Show GitHub Exploit DB Packet Storm
218180 10 危険 ZTE - ZTE ZXDSL 831CII における管理者権限を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-9183 2014-12-3 15:54 2014-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2521 8.3 HIGH
Network
- - Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.… CWE-125
Out-of-bounds Read
CVE-2026-10889 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2522 8.8 HIGH
Adjacent
- - Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium securit… CWE-416
 Use After Free
CVE-2026-10890 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2523 8.8 HIGH
Network
- - Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-10891 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2524 8.3 HIGH
Network
- - Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT… CWE-416
 Use After Free
CVE-2026-10894 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2525 8.8 HIGH
Network
- - Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-10895 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2526 8.8 HIGH
Network
- - Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-10896 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2527 8.3 HIGH
Network
- - Stack buffer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page… CWE-121
Stack-based Buffer Overflow
CVE-2026-10898 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2528 7.5 HIGH
Network
- - Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a … CWE-416
 Use After Free
CVE-2026-10899 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2529 7.5 HIGH
Network
- - Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via … CWE-416
 Use After Free
CVE-2026-10900 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2530 7.5 HIGH
Network
- - Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTM… CWE-416
 Use After Free
CVE-2026-10901 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm