Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218171 7.5 危険 Smarty Pants Plugins - WordPress 用 Smarty Pants Plugins SP Client Document Manager プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9178 2014-12-3 16:07 2014-11-21 Show GitHub Exploit DB Packet Storm
218172 5 警告 SVN Labs Softwares. - WordPress 用 HTML5 MP3 Player with Playlist Free プラグインにおけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2014-9177 2014-12-3 16:07 2014-11-26 Show GitHub Exploit DB Packet Storm
218173 4.3 警告 InstaSqueeze.com - WordPress 用 InstaSqueeze Sexy Squeeze Pages プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9176 2014-12-3 16:06 2014-11-26 Show GitHub Exploit DB Packet Storm
218174 7.5 危険 wpDataTables - WordPress 用 wpDataTables プラグインの wpdatatables.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9175 2014-12-3 16:05 2014-11-22 Show GitHub Exploit DB Packet Storm
218175 4.3 警告 Team Yoast - WordPress 用 Google Analytics by Yoast プラグインおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9174 2014-12-3 16:05 2014-11-26 Show GitHub Exploit DB Packet Storm
218176 7.5 危険 Google Doc Embedder - WordPress 用 Google Doc Embedder プラグインの view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9173 2014-12-3 16:05 2014-11-14 Show GitHub Exploit DB Packet Storm
218177 4.3 警告 Geardev - WordPress 用 Ad-Manager プラグインの track-click.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-8754 2014-12-3 16:04 2014-11-26 Show GitHub Exploit DB Packet Storm
218178 5 警告 Kennziffer.com - TYPO3 用 ke_questionnaire エクステンションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-8874 2014-12-3 15:56 2014-12-1 Show GitHub Exploit DB Packet Storm
218179 5 警告 ZTE - ZTE ZXDSL 831CII における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-9184 2014-12-3 15:55 2014-11-7 Show GitHub Exploit DB Packet Storm
218180 10 危険 ZTE - ZTE ZXDSL 831CII における管理者権限を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-9183 2014-12-3 15:54 2014-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2531 8.8 HIGH
Network
- - Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-10902 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2532 8.8 HIGH
Network
- - Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-10903 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2533 8.3 HIGH
Network
- - Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (… CWE-416
 Use After Free
CVE-2026-10905 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2534 7.5 HIGH
Network
- - Use after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via… CWE-416
 Use After Free
CVE-2026-10906 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2535 8.8 HIGH
Network
- - Out of bounds write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2026-10907 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2536 8.3 HIGH
Network
- - Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… CWE-416
 Use After Free
CVE-2026-10908 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2537 8.3 HIGH
Network
- - Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr… CWE-416
 Use After Free
CVE-2026-10909 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2538 8.8 HIGH
Network
- - Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion
CVE-2026-10910 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2539 8.3 HIGH
Network
- - Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape … CWE-20
 Improper Input Validation 
CVE-2026-10911 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2540 8.8 HIGH
Network
- - Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H… CWE-416
 Use After Free
CVE-2026-10913 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm