Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259391 9.3 危険 Google - Google Chrome の Bidi algorithm の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題 		CVE-2010-2648 2010-11-24 14:39 2010-07-2 Show GitHub Exploit DB Packet Storm
259392 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2647 2010-11-24 14:38 2010-07-2 Show GitHub Exploit DB Packet Storm
259393 9.3 危険 Google - Google Chrome の IFRAME 要素における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2646 2010-11-24 14:38 2010-07-2 Show GitHub Exploit DB Packet Storm
259394 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-noinfo
CVE-2010-2645 2010-11-24 14:38 2010-07-2 Show GitHub Exploit DB Packet Storm
259395 9.3 危険 Google - Google Chrome の WebKit 内にある WebCore における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2302 2010-11-24 14:38 2010-06-8 Show GitHub Exploit DB Packet Storm
259396 4.3 警告 Google - Google Chrome の WebKit 内にある editing/markup.cpp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2301 2010-11-24 14:37 2010-06-8 Show GitHub Exploit DB Packet Storm
259397 9.3 危険 Google - Google Chrome の Element::normalizeAttributes 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2300 2010-11-24 14:37 2010-06-8 Show GitHub Exploit DB Packet Storm
259398 9.3 危険 Google - Google Chrome の Clipboard::DispatchObject 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2299 2010-11-24 14:37 2010-06-8 Show GitHub Exploit DB Packet Storm
259399 10 危険 Google - Linux 上で稼働する Google Chrome におけるサンドボックスの制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2298 2010-11-24 14:36 2010-06-8 Show GitHub Exploit DB Packet Storm
259400 9.3 危険 Google - Google Chrome の WebKit 内にある rendering/FixedTableLayout.cpp における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2297 2010-11-24 14:36 2010-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1781 5.4 MEDIUM
Network 		apache atlas An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue. CWE-80
Basic XSS 		CVE-2025-62198 2026-06-23 23:53 2026-06-22 Show GitHub Exploit DB Packet Storm
1782 8.1 HIGH
Network 		- - picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.autocomplete.AutoComplete.get_entity function in reduce methods. Attackers can embed undetected code in pickle fil… CWE-502
 Deserialization of Untrusted Data 		CVE-2025-71358 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1783 6.5 MEDIUM
Network 		- - Cap-go before 12.128.2 contains multiple SQL injection vulnerabilities in cloudflare.ts where user-controlled values from API request bodies are interpolated directly into SQL query strings without s… CWE-89
SQL Injection 		CVE-2026-56221 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1784 6.4 MEDIUM
Network 		- - Capgo before 12.128.2 contains a weak parsing vulnerability in the x-limited-key-id header that allows attackers to bypass subkey enforcement by submitting malformed values, zero, or duplicate header… CWE-20
 Improper Input Validation  		CVE-2026-56306 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1785 5.3 MEDIUM
Network 		- - Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.get_current_plan_max_org RPC function that allows unauthenticated attackers to retrieve arbitrary organization plan … CWE-285
Improper Authorization 		CVE-2026-56311 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1786 6.8 MEDIUM
Network 		- - The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameters in the import_list(), url_detail(), and file_detail() … - CVE-2026-7842 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1787 8.8 HIGH
Network 		- - The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a SQL Injection vulnerability exploitable by … - CVE-2026-8163 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1788 7.1 HIGH
Network 		- - The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form output on validation errors, leading to a Reflected Cros… - CVE-2026-8172 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1789 5.4 MEDIUM
Network 		- - The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before storing it as post meta and rendering it b… - CVE-2026-8378 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1790 7.5 HIGH
Network 		- - The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated attackers to download files uploaded by… - CVE-2026-8379 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm