Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2751 6.1 警告
Network 		Absinthe-graphql Absinthe.Plug (absinthe plug) Absinthe-graphqlのAbsinthe.Plug (absinthe plug)におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42794 2026-05-25 10:25 2026-05-8 Show GitHub Exploit DB Packet Storm
2752 4.3 警告
Network 		Getinboxzero Inbox Zero GetinboxzeroのInbox Zeroにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-42865 2026-05-25 10:25 2026-05-11 Show GitHub Exploit DB Packet Storm
2753 4 警告
Network 		Nine Nines Cowlib Nine NinesのCowlibにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-43968 2026-05-25 10:25 2026-05-11 Show GitHub Exploit DB Packet Storm
2754 3.2 低
Local 		Nine Nines Cowlib Nine NinesのCowlibにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-43969 2026-05-25 10:24 2026-05-11 Show GitHub Exploit DB Packet Storm
2755 6.1 警告
Network 		Boscop Orejime GayaのOrejimeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6095 2026-05-25 10:24 2026-05-19 Show GitHub Exploit DB Packet Storm
2756 6.1 警告
Network 		Drupal Obfuscate Obfuscateにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6871 2026-05-25 10:24 2026-05-19 Show GitHub Exploit DB Packet Storm
2757 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2025-71266 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
2758 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2025-71267 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
2759 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2025-71268 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
2760 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71269 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307001 - google chrome Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. CWE-193
 Off-by-one Error 		CVE-2011-2852 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307002 - google chrome Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2011-2851 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307003 - google chrome Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2011-2850 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307004 - google chrome The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors. CWE-476
 NULL Pointer Dereference 		CVE-2011-2849 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307005 - google chrome Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button. CWE-20
 Improper Input Validation  		CVE-2011-2848 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307006 - google
apple 		chrome
iphone_os
itunes
safari 		Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted d… CWE-416
 Use After Free 		CVE-2011-2847 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307007 - google
apple 		chrome
iphone_os
itunes
safari 		Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event ha… CWE-416
 Use After Free 		CVE-2011-2846 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307008 - google chrome Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2011-2844 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307009 - google chrome Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2011-2843 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
307010 - google chrome The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors. CWE-20
 Improper Input Validation  		CVE-2011-2842 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm