Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240521 6 警告 ms topsites - PHP-Nuke の MS TopSites アドオンにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5918 2012-09-25 16:59 2007-11-9 Show GitHub Exploit DB Packet Storm
240522 6.8 警告 jean charles - JBC Explorer の dirsys/modules/config/post.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5914 2012-09-25 16:59 2007-11-9 Show GitHub Exploit DB Packet Storm
240523 6.8 警告 jean charles - JBC Explorer の dirsys/modules/auth.php における auth.inc.php を削除される脆弱性 CWE-287
不適切な認証 		CVE-2007-5913 2012-09-25 16:59 2007-11-9 Show GitHub Exploit DB Packet Storm
240524 7.5 危険 jportal - jPORTAL の mailer.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5912 2012-09-25 16:59 2007-11-9 Show GitHub Exploit DB Packet Storm
240525 10 危険 MIT Kerberos - krb5 の lib/rpc/svc_auth_gss.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-5902 2012-09-25 16:59 2007-12-5 Show GitHub Exploit DB Packet Storm
240526 8.5 危険 オラクル - Oracle Database Server の MDSYS.SDO_CS におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5897 2012-09-25 16:59 2007-10-16 Show GitHub Exploit DB Packet Storm
240527 7.1 危険 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-5896 2012-09-25 16:59 2007-11-8 Show GitHub Exploit DB Packet Storm
240528 4.3 警告 Zoho Corporation - ManageEngine OpManager MSP Edition などにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5891 2012-09-25 16:59 2007-11-7 Show GitHub Exploit DB Packet Storm
240529 10 危険 idmos - IDMOS における PHP リモートファイルインクルージョンの脆弱性 CWE-Other
その他 		CVE-2007-5889 2012-09-25 16:59 2007-11-7 Show GitHub Exploit DB Packet Storm
240530 7.5 危険 infuseum - ASP Message Board の boards/printer.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5887 2012-09-25 16:59 2007-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2071 - - - Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` which matches newlines (allowing embedded newlines to pass), TLSA `matchingType=0`… CWE-74
Injection 		CVE-2026-41237 2026-06-6 00:09 2026-06-5 Show GitHub Exploit DB Packet Storm
2072 7.6 HIGH
Network 		- - Froxlor is open source server administration software. Prior to version 2.3.7, the `DomainZones.add` API endpoint does not sanitize newline characters in TXT record content. An authenticated customer… CWE-74
Injection 		CVE-2026-41234 2026-06-6 00:09 2026-06-5 Show GitHub Exploit DB Packet Storm
2073 8.8 HIGH
Network 		- - Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H… CWE-20
CWE-94
CWE-119
 Improper Input Validation 
Code Injection
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-10904 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2074 - - - Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted… CWE-20
 Improper Input Validation  		CVE-2026-10981 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2075 - - - Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) CWE-125
Out-of-bounds Read 		CVE-2026-11061 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2076 - - - Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch… CWE-416
 Use After Free 		CVE-2026-11065 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2077 - - - Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi… CWE-20
 Improper Input Validation  		CVE-2026-11066 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2078 8.1 HIGH
Network 		- - Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome … CWE-416
 Use After Free 		CVE-2026-11185 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2079 4.3 MEDIUM
Network 		- - Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-11245 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
2080 5.3 MEDIUM
Network 		- - Insufficient validation of untrusted input in IndexedDB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a c… CWE-20
 Improper Input Validation  		CVE-2026-11246 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm