Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232751 7.5 危険 racer - Racer の client などにおけるバッファオーバーフローの脆弱性 - CVE-2007-4370 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
232752 5 警告 sote - SOTEeSKLEP の go/_files におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4369 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
232753 5 警告 wengo - WengoPhone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4366 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
232754 6.8 警告 prozilla - Prozilla Webring の category.php における SQL インジェクションの脆弱性 - CVE-2007-4362 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
232755 6.8 警告 skilmatch staffing systems - SkilMatch Staffing Systems JobLister3 における SQL インジェクションの脆弱性 - CVE-2007-4359 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
232756 4.3 警告 zoidcom - Zoidcom におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4358 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
232757 7.5 危険 phpcentral - PHPCentral Login の include.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4342 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
232758 7.5 危険 phpdvd - phpDVD の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4340 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
232759 7.5 危険 phpcentral - PHPCentral Poll Script における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4339 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
232760 5.8 警告 streamripper - Streamripper の lib/http.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4337 2012-12-20 18:33 2007-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1801 9.6 CRITICAL
Network
- - Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium secu… CWE-20
 Improper Input Validation 
CVE-2026-11198 2026-06-6 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1802 6.5 MEDIUM
Network
- - Insufficient policy enforcement in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML p… CWE-284
Improper Access Control
CVE-2026-11197 2026-06-6 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1803 8.8 HIGH
Network
- - Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin p… CWE-20
 Improper Input Validation 
CVE-2026-10922 2026-06-6 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1804 8.8 HIGH
Network
- - Inappropriate implementation in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Cri… CWE-787
 Out-of-bounds Write
CVE-2026-10897 2026-06-6 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1805 8.8 HIGH
Network
- - Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-10893 2026-06-6 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1806 9.6 CRITICAL
Network
- - Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: C… CWE-787
 Out-of-bounds Write
CVE-2026-10892 2026-06-6 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1807 - - - sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.match without end-anchoring. This allows an attacker to bypas… - CVE-2026-37737 2026-06-6 01:07 2026-06-6 Show GitHub Exploit DB Packet Storm
1808 - - - The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors (IVs) for … CWE-321
CWE-338
 Use of Hard-coded Cryptographic Key
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-11347 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
1809 - - - An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAccess function incorre… CWE-287
Improper Authentication
CVE-2026-11345 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
1810 - - - A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific proces… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-11346 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm