Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227931 10 危険 マイクロソフト
アドビシステムズ		 - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-4165 2012-12-26 13:56 2012-08-21 Show GitHub Exploit DB Packet Storm
227932 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5251 2012-12-26 13:55 2012-10-8 Show GitHub Exploit DB Packet Storm
227933 10 危険 マイクロソフト
アドビシステムズ		 - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-4164 2012-12-26 13:55 2012-08-21 Show GitHub Exploit DB Packet Storm
227934 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5250 2012-12-26 13:54 2012-10-8 Show GitHub Exploit DB Packet Storm
227935 10 危険 マイクロソフト
アドビシステムズ		 - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-4163 2012-12-26 13:54 2012-08-21 Show GitHub Exploit DB Packet Storm
227936 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5249 2012-12-26 13:53 2012-10-8 Show GitHub Exploit DB Packet Storm
227937 9.3 危険 マイクロソフト
アドビシステムズ		 - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-1535 2012-12-26 13:52 2012-08-14 Show GitHub Exploit DB Packet Storm
227938 5.8 警告 マイクロソフト - Microsoft Windows Server 2008 R2 および Windows Server 2012 におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2549 2012-12-26 13:48 2012-12-11 Show GitHub Exploit DB Packet Storm
227939 4.3 警告 Haxx
サイバートラスト株式会社
VMware
レッドハット		 - libcurl の Curl_input_negotiate 関数におけるクライアントになりすまされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-2192 2012-12-26 12:14 2011-06-23 Show GitHub Exploit DB Packet Storm
227940 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の include/asm-x86/futex.h におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-3086 2012-12-26 12:04 2010-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 8.8 HIGH
Network 		amazon kiro_ide Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions… Update CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-10591 2026-06-6 02:45 2026-06-3 Show GitHub Exploit DB Packet Storm
332 9.6 CRITICAL
Network 		google chrome Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-10886 2026-06-6 02:42 2026-06-5 Show GitHub Exploit DB Packet Storm
333 8.8 HIGH
Network 		google chrome Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-10885 2026-06-6 02:42 2026-06-5 Show GitHub Exploit DB Packet Storm
334 8.3 HIGH
Network 		google chrome Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page… New CWE-416
 Use After Free 		CVE-2026-10884 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
335 8.8 HIGH
Network 		google chrome Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) New CWE-787
 Out-of-bounds Write 		CVE-2026-10883 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
336 8.8 HIGH
Network 		google chrome Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-10882 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
337 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative/amplification effe… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-47707 2026-06-6 02:38 2026-06-5 Show GitHub Exploit DB Packet Storm
338 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter extension is vulnerable to an Application-level DOS due to a lack of cycle detecti… New CWE-400
CWE-674
 Uncontrolled Resource Consumption
 Uncontrolled Recursion 		CVE-2026-47706 2026-06-6 02:37 2026-06-5 Show GitHub Exploit DB Packet Storm
339 7.3 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into an array reference… New CWE-843
Type Confusion 		CVE-2026-9334 2026-06-6 02:36 2026-06-3 Show GitHub Exploit DB Packet Storm
340 7.5 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decode_json() advances t… New CWE-755
CWE-763
 Improper Handling of Exceptional Conditions
 Release of Invalid Pointer or Reference 		CVE-2026-9516 2026-06-6 02:35 2026-06-3 Show GitHub Exploit DB Packet Storm