Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240751 6.8 警告 odysseus blog - OdysseusBlog の blog.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6951 2012-09-25 15:36 2007-01-22 Show GitHub Exploit DB Packet Storm
240752 10 危険 owa - OWA の POP3/SMTP におけるバッファオーバーフローの脆弱性 - CVE-2006-6940 2012-09-25 15:36 2007-01-17 Show GitHub Exploit DB Packet Storm
240753 5 警告 nitrotech - NitroTech の includes/common.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6938 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
240754 7.5 危険 pensacola web designs - Xtreme ASP Photo Gallery の displaypic.asp における SQL インジェクションの脆弱性 - CVE-2006-6937 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
240755 6.8 警告 pensacola web designs - Xtreme ASP Photo Gallery におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6936 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
240756 7.5 危険 image gallery with access database - Access Database を持つ Image Gallery における SQL インジェクションの脆弱性 - CVE-2006-6932 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
240757 5 警告 Mozilla Foundation - Mozilla Firefox におけるフィッシングの保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2006-6971 2012-09-25 15:36 2006-10-11 Show GitHub Exploit DB Packet Storm
240758 10 危険 karl dahlke - Karl Dahlke Edbrowse の http.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-6909 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
240759 10 危険 マイクロソフト - Microsoft Windows Mobile Pocket PC edition の Bluetooth スタックにおける管理者のアクセス権限を取得される脆弱性 - CVE-2006-6902 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
240760 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2006-6955 2012-09-25 15:36 2004-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 8.8 HIGH
Network 		amazon kiro_ide Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions… Update CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-10591 2026-06-6 02:45 2026-06-3 Show GitHub Exploit DB Packet Storm
332 9.6 CRITICAL
Network 		google chrome Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-10886 2026-06-6 02:42 2026-06-5 Show GitHub Exploit DB Packet Storm
333 8.8 HIGH
Network 		google chrome Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-10885 2026-06-6 02:42 2026-06-5 Show GitHub Exploit DB Packet Storm
334 8.3 HIGH
Network 		google chrome Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page… New CWE-416
 Use After Free 		CVE-2026-10884 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
335 8.8 HIGH
Network 		google chrome Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) New CWE-787
 Out-of-bounds Write 		CVE-2026-10883 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
336 8.8 HIGH
Network 		google chrome Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-10882 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
337 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative/amplification effe… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-47707 2026-06-6 02:38 2026-06-5 Show GitHub Exploit DB Packet Storm
338 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter extension is vulnerable to an Application-level DOS due to a lack of cycle detecti… New CWE-400
CWE-674
 Uncontrolled Resource Consumption
 Uncontrolled Recursion 		CVE-2026-47706 2026-06-6 02:37 2026-06-5 Show GitHub Exploit DB Packet Storm
339 7.3 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into an array reference… Update CWE-843
Type Confusion 		CVE-2026-9334 2026-06-6 02:36 2026-06-3 Show GitHub Exploit DB Packet Storm
340 7.5 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decode_json() advances t… Update CWE-755
CWE-763
 Improper Handling of Exceptional Conditions
 Release of Invalid Pointer or Reference 		CVE-2026-9516 2026-06-6 02:35 2026-06-3 Show GitHub Exploit DB Packet Storm