Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223251 4.3 警告 DNN - DotNetNuke におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4649 2014-03-14 15:05 2013-08-13 Show GitHub Exploit DB Packet Storm
223252 3.5 注意 DNN - DotNetNuke におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3943 2014-03-14 14:39 2013-08-13 Show GitHub Exploit DB Packet Storm
223253 7.5 危険 FreeType Project - FreeType の cff/cf2hints.c 内の cf2_hintmap_build 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-2240 2014-03-14 14:19 2014-03-7 Show GitHub Exploit DB Packet Storm
223254 4.3 警告 CiviCRM
Caseproof
Joobi
- 複数ベンダの製品で使用される Open Flash Chart の open-flash-chart.swf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1636 2014-03-14 13:48 2013-06-10 Show GitHub Exploit DB Packet Storm
223255 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2014-0502 2014-03-13 18:24 2014-02-20 Show GitHub Exploit DB Packet Storm
223256 7.8 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0499 2014-03-13 18:23 2014-02-20 Show GitHub Exploit DB Packet Storm
223257 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0498 2014-03-13 18:19 2014-02-20 Show GitHub Exploit DB Packet Storm
223258 3.5 注意 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0437 2014-03-13 18:18 2014-01-14 Show GitHub Exploit DB Packet Storm
223259 10 危険 シスコシステムズ - Cisco Unified SIP Phone 3905 のファームウェアにおける root アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0721 2014-03-13 17:45 2014-02-19 Show GitHub Exploit DB Packet Storm
223260 7.5 危険 Raoul Proenca - Gnew の users/login.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-5639 2014-03-13 17:45 2013-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2531 7.1 HIGH
Local
- - Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom rendering pipeline that allows attackers to execute arbitrary JavaScript by embedd… CWE-95
Eval Injection
CVE-2026-11422 2026-06-9 00:16 2026-06-6 Show GitHub Exploit DB Packet Storm
2532 9.6 CRITICAL
Network
google chrome Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML … CWE-843
Type Confusion
CVE-2026-11052 2026-06-9 00:08 2026-06-5 Show GitHub Exploit DB Packet Storm
2533 6.5 MEDIUM
Network
google chrome Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi… CWE-125
Out-of-bounds Read
CVE-2026-11051 2026-06-9 00:08 2026-06-5 Show GitHub Exploit DB Packet Storm
2534 6.5 MEDIUM
Network
google chrome Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted… CWE-346
 Origin Validation Error
CVE-2026-11048 2026-06-9 00:04 2026-06-5 Show GitHub Exploit DB Packet Storm
2535 9.6 CRITICAL
Network
google chrome Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via … CWE-20
 Improper Input Validation 
CVE-2026-11047 2026-06-9 00:03 2026-06-5 Show GitHub Exploit DB Packet Storm
2536 7.5 HIGH
Network
- - Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6 packet parser. The parser decrements an unsigned 64-bit payload-length value (taken from the IPv6 fixe… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-49494 2026-06-9 00:03 2026-06-7 Show GitHub Exploit DB Packet Storm
2537 6.5 MEDIUM
Network
google chrome Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informatio… CWE-20
 Improper Input Validation 
CVE-2026-11045 2026-06-9 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2538 8.0 HIGH
Network
termix termix Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop (Electron) disables TLS certificate validation,… CWE-295
Improper Certificate Validation 
CVE-2026-45745 2026-06-9 00:02 2026-06-6 Show GitHub Exploit DB Packet Storm
2539 - - - Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prio… CWE-1333
 Inefficient Regular Expression Complexity
CVE-2026-45409 2026-06-9 00:02 2026-06-6 Show GitHub Exploit DB Packet Storm
2540 6.5 MEDIUM
Network
google chrome Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium s… CWE-472
CWE-190
 External Control of Assumed-Immutable Web Parameter
 Integer Overflow or Wraparound
CVE-2026-11044 2026-06-9 00:01 2026-06-5 Show GitHub Exploit DB Packet Storm