Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223091 5 警告 Libreswan Project - Libreswan におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-6467 2014-01-28 18:18 2013-11-4 Show GitHub Exploit DB Packet Storm
223092 7.5 危険 Brion Vibber (MediaWiki)
MediaWiki
- MediaWiki 用 CentralAuth 拡張機能におけるパスワードなしで認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-4304 2014-01-28 18:16 2013-09-3 Show GitHub Exploit DB Packet Storm
223093 5 警告 freedesktop.org - Poppler の JBIG2Stream.cc 内の JBIG2Stream::readSegments メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-7296 2014-01-28 18:05 2013-12-7 Show GitHub Exploit DB Packet Storm
223094 4.3 警告 Gapless Player - SimZip (Simple Zip Viewer) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-0809 2014-01-28 18:04 2014-01-24 Show GitHub Exploit DB Packet Storm
223095 8.3 危険 Xen プロジェクト - Xen の do_physdev_op 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1666 2014-01-28 18:02 2014-01-23 Show GitHub Exploit DB Packet Storm
223096 5 警告 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point Session Authentication Agent における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2014-1673 2014-01-28 18:01 2014-01-22 Show GitHub Exploit DB Packet Storm
223097 4 警告 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point Security Gateway および Management Server におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1672 2014-01-28 18:01 2014-01-14 Show GitHub Exploit DB Packet Storm
223098 4.4 警告 Xen プロジェクト - Xen の IRQ 設定におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-1642 2014-01-28 18:01 2014-01-23 Show GitHub Exploit DB Packet Storm
223099 6.8 警告 OpenPNEプロジェクト - OpenPNE において任意の PHP コードが実行される脆弱性 CWE-Other
その他
CVE-2013-5350 2014-01-28 17:58 2014-01-24 Show GitHub Exploit DB Packet Storm
223100 10 危険 Franklin Fueling Systems - Franklin Fueling Systems TS-550 evo のファームウェアにおける root 権限を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-7248 2014-01-28 17:57 2013-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 6.5 MEDIUM
Network
google chrome Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions v… Update CWE-20
CWE-602
 Improper Input Validation 
 Client-Side Enforcement of Server-Side Security
CVE-2026-11287 2026-06-9 01:31 2026-06-5 Show GitHub Exploit DB Packet Storm
162 5.3 MEDIUM
Network
cosimo net\ Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional st… Update CWE-93
CRLF Injection
CVE-2026-46739 2026-06-9 01:31 2026-06-5 Show GitHub Exploit DB Packet Storm
163 7.5 HIGH
Network
oalders html\ HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV retu… Update CWE-416
 Use After Free
CVE-2026-8829 2026-06-9 01:29 2026-06-4 Show GitHub Exploit DB Packet Storm
164 5.0 MEDIUM
Local
google chrome Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. (Ch… Update CWE-472
CWE-190
 External Control of Assumed-Immutable Web Parameter
 Integer Overflow or Wraparound
CVE-2026-11281 2026-06-9 01:27 2026-06-5 Show GitHub Exploit DB Packet Storm
165 - - - Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67. New CWE-416
 Use After Free
CVE-2026-48913 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
166 - - - phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnerable to collision attac… New CWE-328
 Use of Weak Hash
CVE-2026-48488 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
167 8.8 HIGH
Network
- - Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically del… New CWE-285
CWE-613
Improper Authorization
 Insufficient Session Expiration
CVE-2026-46656 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
168 - - - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, DatasetRow create and update mass-assignment allows cross-workspace row takeover. This… New CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46478 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
169 - - - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset create and update mass-assignment allows cross-workspace dataset takeover. Thi… New CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46477 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
170 - - - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-workspace template takeo… New CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46476 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm