Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2731 3.1 低
Network 		Django Software Foundation Django Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性 CWE-524
重要な情報を含むキャッシュの使用 		CVE-2026-35193 2026-06-8 12:31 2026-06-3 Show GitHub Exploit DB Packet Storm
2732 6.1 警告
Network 		citeum opencti citeumのopenctiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35212 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
2733 8.2 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-37234 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
2734 7.8 重要
Local 		radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40527 2026-06-8 12:31 2026-04-17 Show GitHub Exploit DB Packet Storm
2735 7.5 重要
Network 		quic-go project quic-go quic-go projectのquic-goにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-40898 2026-06-8 12:31 2026-06-4 Show GitHub Exploit DB Packet Storm
2736 6.5 警告
Network 		VMware Spring Cloud Function VMwareのSpring Cloud Functionにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-40989 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
2737 6.5 警告
Network 		VMware Spring Cloud Function VMwareのSpring Cloud Functionにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-40990 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
2738 7.5 重要
Network 		librechat librechat LibreChatにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-4276 2026-06-8 12:31 2026-03-16 Show GitHub Exploit DB Packet Storm
2739 4.8 警告
Network 		ERLANG Erlang/OTP ERLANGのErlang/OTPにおける複数の脆弱性 CWE-295
CWE-296
CVE-2026-42789 2026-06-8 12:31 2026-05-27 Show GitHub Exploit DB Packet Storm
2740 6.1 警告
Network 		Prometheus Prometheus Prometheusにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44903 2026-06-8 12:31 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307541 - intel g41_driver The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, a… CWE-399
 Resource Management Errors 		CVE-2011-2604 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307542 - nvidia 9400m_driver The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as d… CWE-399
 Resource Management Errors 		CVE-2011-2603 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307543 - nvidia geforce_310_driver The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla F… CWE-399
 Resource Management Errors 		CVE-2011-2602 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307544 - apple mac_os_x The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service (desktop hang) via vectors involving WebGL and (1) shad… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2601 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307545 - microsoft windows_xp The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service (system crash) via vectors involving WebGL and (1) sh… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2600 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307546 - google chrome Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted … CWE-200
Information Exposure 		CVE-2011-2599 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307547 - mozilla firefox The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, … CWE-200
Information Exposure 		CVE-2011-2598 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307548 - mozilla gecko
firefox
thunderbird 		Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate … CWE-20
 Improper Input Validation  		CVE-2011-2366 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307549 - reallysimplechat really_simple_chat Cross-site scripting (XSS) vulnerability in chat/base/admin/login.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_message parame… CWE-79
Cross-site Scripting 		CVE-2011-2470 2024-11-21 10:28 2011-06-30 Show GitHub Exploit DB Packet Storm
307550 - google
apple 		chrome
iphone_os
itunes
safari 		Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements. CWE-416
 Use After Free 		CVE-2011-2351 2024-11-21 10:28 2011-06-30 Show GitHub Exploit DB Packet Storm