Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222791 5 警告 Zabbix - Zabbix の user.login 関数における LDAP 設定を上書きされる脆弱性 CWE-287
不適切な認証
CVE-2013-1364 2013-12-17 16:47 2013-01-4 Show GitHub Exploit DB Packet Storm
222792 4.3 警告 MediaWiki - MediaWiki の CleanChanges 拡張機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-4569 2013-12-17 16:42 2013-11-14 Show GitHub Exploit DB Packet Storm
222793 4.3 警告 MediaWiki - MediaWiki の Sanitizer::checkCss におけるクロスサイトスクリプティングの脆弱性 CWE-Other
その他
CVE-2013-4568 2013-12-17 16:41 2013-11-14 Show GitHub Exploit DB Packet Storm
222794 4.3 警告 MediaWiki - MediaWiki の Sanitizer::checkCss におけるクロスサイトスクリプティングの脆弱性 CWE-Other
その他
CVE-2013-4567 2013-12-17 16:39 2013-11-14 Show GitHub Exploit DB Packet Storm
222795 6.8 警告 MediaWiki - MediaWiki 用の CentralAuth 拡張機能におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5394 2013-12-17 16:38 2012-10-3 Show GitHub Exploit DB Packet Storm
222796 9 危険 マカフィー - McAfee Email Gateway における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-7104 2013-12-17 16:31 2013-12-3 Show GitHub Exploit DB Packet Storm
222797 9 危険 マカフィー - McAfee Email Gateway における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-7103 2013-12-17 16:30 2013-12-3 Show GitHub Exploit DB Packet Storm
222798 6.5 警告 マカフィー - McAfee Email Gateway の /admin/cgi-bin/rpc/doReport/18 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-7092 2013-12-17 16:29 2013-12-3 Show GitHub Exploit DB Packet Storm
222799 5 警告 Philippe Jounin - Tftpd32 のクライアントにおけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2013-6809 2013-12-17 15:49 2013-12-1 Show GitHub Exploit DB Packet Storm
222800 6.8 警告 Xen プロジェクト - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6400 2013-12-17 15:20 2013-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
961 8.3 HIGH
Network
- - Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch… CWE-416
 Use After Free
CVE-2026-9893 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
962 8.3 HIGH
Network
- - Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML … CWE-416
 Use After Free
CVE-2026-9890 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
963 9.6 CRITICAL
Network
- - Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-9886 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
964 8.3 HIGH
Network
- - Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es… CWE-20
 Improper Input Validation 
CVE-2026-9885 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
965 9.0 CRITICAL
Network
- - Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a cra… CWE-416
 Use After Free
CVE-2026-9881 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
966 7.3 HIGH
Network
- - A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation leads to injection. T… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2026-9422 2026-05-30 01:16 2026-05-25 Show GitHub Exploit DB Packet Storm
967 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-9194 2026-05-30 01:16 2026-05-30 Show GitHub Exploit DB Packet Storm
968 7.3 HIGH
Network
- - IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decode_ux() in bin/… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2026-48961 2026-05-30 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
969 7.5 HIGH
Network
- - IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward() compares length $offset (the digit count of the offset, 1 to 19) agains… CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-48959 2026-05-30 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
970 2.0 LOW
Network
- - AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, an approved mobile device token created in single-user mod… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-47713 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm