Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2631	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-10962	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2632	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-10963	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2633	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-10964	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2634	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-10965	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2635	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-10966	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2636	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10967	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2637	7.4	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-10968	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2638	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-10969	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2639	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-10970	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2640	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-10971	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307641	-	wpsymposium	wp_symposium	Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable exte…	NVD-CWE-Other	CVE-2011-5051	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

307642	-	elitecore	cyberoam_unified_threat_management	SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via th…	CWE-89 SQL Injection	CVE-2011-5050	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

307643	-	-	-	MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted packet to TCP port 3306.	CWE-399 Resource Management Errors	CVE-2011-5049	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

307644	-	e107	e107	SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.	CWE-89 SQL Injection	CVE-2011-4921	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

307645	-	e107	e107	Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb…	CWE-79 Cross-site Scripting	CVE-2011-4920	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

307646	-	ibm	web_experience_factory	Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2011-5048	2024-11-21 10:33	2012-01-4	Show	GitHub Exploit DB Packet Storm

307647	-	pfsense	pfsense	Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.	CWE-79 Cross-site Scripting	CVE-2011-5047	2024-11-21 10:33	2012-01-4	Show	GitHub Exploit DB Packet Storm

307648	-	microsoft	windows_xp windows_server_2008 windows_7 windows_server_2003 windows_vista	The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, …	CWE-20 Improper Input Validation	CVE-2011-5046	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm

307649	-	jjwdesign	php_booking_calendar	Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the page_info_message parameter.	CWE-79 Cross-site Scripting	CVE-2011-5045	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm

307650	-	sopcast	sopcast	SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-5044	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm