Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224261 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0495 2014-01-20 13:48 2014-01-14 Show GitHub Exploit DB Packet Storm
224262 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0493 2014-01-20 13:47 2014-01-14 Show GitHub Exploit DB Packet Storm
224263 4.3 警告 Schneider Electric - Schneider Electric ClearSCADA および SCADA Expert ClearSCADA の DNP3 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6142 2014-01-20 11:12 2013-01-14 Show GitHub Exploit DB Packet Storm
224264 7.5 危険 cspmum - CSP MySQL User Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1466 2014-01-20 10:28 2013-01-8 Show GitHub Exploit DB Packet Storm
224265 7.5 危険 Open Web Analytics - Open Web Analytics のパスワードリセットのページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1206 2014-01-20 10:16 2014-01-9 Show GitHub Exploit DB Packet Storm
224266 10 危険 LOREX Technology - 複数の Lorex Edge 製品のファームウェアの INetViewX ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-1201 2014-01-20 10:16 2014-01-9 Show GitHub Exploit DB Packet Storm
224267 7.5 危険 WellinTech - 複数の WellinTech 製品の ActiveX コントロールにおける任意の DLL コードをダウンロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2013-2827 2014-01-20 10:15 2014-01-14 Show GitHub Exploit DB Packet Storm
224268 6.4 警告 WellinTech - 複数の WellinTech 製品におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2826 2014-01-20 10:14 2014-01-14 Show GitHub Exploit DB Packet Storm
224269 3.5 注意 VASCO - VASCO IDENTIKEY Authentication Server に認証不備の脆弱性 CWE-287
CWE-Other
CVE-2013-7292 2014-01-17 18:20 2014-01-9 Show GitHub Exploit DB Packet Storm
224270 7.2 危険 サン・マイクロシステムズ
オラクル
- Sun Solaris の dbm_open() および dbminit() 関数におけるバッファオーバーフローの脆弱性 - CVE-2003-1067 2014-01-17 18:10 2003-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2441 8.8 HIGH
Network
google chrome Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via… CWE-416
 Use After Free
CVE-2026-11028 2026-06-6 10:37 2026-06-5 Show GitHub Exploit DB Packet Storm
2442 8.8 HIGH
Network
google chrome Use after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) CWE-416
 Use After Free
CVE-2026-11188 2026-06-6 10:36 2026-06-5 Show GitHub Exploit DB Packet Storm
2443 8.8 HIGH
Network
google chrome Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extens… CWE-416
 Use After Free
CVE-2026-11201 2026-06-6 10:36 2026-06-5 Show GitHub Exploit DB Packet Storm
2444 8.8 HIGH
Network
google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secu… CWE-20
 Improper Input Validation 
CVE-2026-11202 2026-06-6 10:36 2026-06-5 Show GitHub Exploit DB Packet Storm
2445 6.5 MEDIUM
Network
google chrome Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CWE-200
Information Exposure
CVE-2026-11203 2026-06-6 10:36 2026-06-5 Show GitHub Exploit DB Packet Storm
2446 6.5 MEDIUM
Network
gkostka lwext4 An out-of-bounds read in the ext4_ext_binsearch_idx function in src/ext4_extent.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by supplying a specially crafted ext4 files… CWE-125
Out-of-bounds Read
CVE-2025-70101 2026-06-6 06:10 2026-06-3 Show GitHub Exploit DB Packet Storm
2447 5.5 MEDIUM
Local
gkostka lwext4 A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 fi… CWE-369
 Divide By Zero
CVE-2025-70100 2026-06-6 06:09 2026-06-3 Show GitHub Exploit DB Packet Storm
2448 9.8 CRITICAL
Network
freedesktop libinput In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution CWE-93
CRLF Injection
CVE-2026-50292 2026-06-6 06:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2449 9.1 CRITICAL
Network
netty netty-incubator-codec-ohttp The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. When deriving native memory addresses… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-48040 2026-06-6 06:04 2026-06-5 Show GitHub Exploit DB Packet Storm
2450 5.3 MEDIUM
Network
netty netty-incubator-codec-ohttp The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byte[] is filled with zeros and has no way to distin… CWE-330
 Use of Insufficiently Random Values
CVE-2026-41207 2026-06-6 06:01 2026-06-5 Show GitHub Exploit DB Packet Storm