Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2931 9.6 緊急
Network 		charm Wish charmのWishにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41589 2026-06-3 17:04 2026-05-7 Show GitHub Exploit DB Packet Storm
2932 9.1 緊急
Network 		i18next i18next-http-backend i18nextのi18next-http-backendにおける複数の脆弱性 CWE-22
CWE-74
CVE-2026-41691 2026-06-3 17:04 2026-05-7 Show GitHub Exploit DB Packet Storm
2933 4.7 警告
Network 		i18next i18nextify i18nextのi18nextifyにおける複数の脆弱性 CWE-79
CWE-94
CVE-2026-41692 2026-06-3 17:04 2026-05-7 Show GitHub Exploit DB Packet Storm
2934 10 緊急
Network 		th30d4y OpenLearnX th30d4yのOpenLearnXにおける複数の脆弱性 CWE-250
CWE-284
CWE-693
CWE-78
CWE-94
CVE-2026-41900 2026-06-3 17:04 2026-05-8 Show GitHub Exploit DB Packet Storm
2935 6.1 警告
Network 		The Go Project Net The Go ProjectのNetにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-42502 2026-06-3 17:04 2026-05-22 Show GitHub Exploit DB Packet Storm
2936 6.1 警告
Network 		The Go Project Net The Go ProjectのNetにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42506 2026-06-3 17:04 2026-05-22 Show GitHub Exploit DB Packet Storm
2937 7.8 重要
Local 		horsicq Detect-It-Easy horsicqのDetect-It-Easyにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-43616 2026-06-3 17:04 2026-05-4 Show GitHub Exploit DB Packet Storm
2938 9.9 緊急
Network 		オラクル Oracle iAssets オラクルのOracle iAssetsにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46822 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
2939 7.5 重要
Network 		fastify fastify/accepts-serializer fastifyのfastify/accepts-serializerにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-7768 2026-06-3 17:04 2026-05-4 Show GitHub Exploit DB Packet Storm
2940 8.8 重要
Local 		NanoCo NanoClaw NanoCoのNanoClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-7875 2026-06-3 17:04 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307541 - intel g41_driver The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, a… CWE-399
 Resource Management Errors 		CVE-2011-2604 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307542 - nvidia 9400m_driver The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as d… CWE-399
 Resource Management Errors 		CVE-2011-2603 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307543 - nvidia geforce_310_driver The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla F… CWE-399
 Resource Management Errors 		CVE-2011-2602 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307544 - apple mac_os_x The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service (desktop hang) via vectors involving WebGL and (1) shad… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2601 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307545 - microsoft windows_xp The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service (system crash) via vectors involving WebGL and (1) sh… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2600 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307546 - google chrome Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted … CWE-200
Information Exposure 		CVE-2011-2599 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307547 - mozilla firefox The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, … CWE-200
Information Exposure 		CVE-2011-2598 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307548 - mozilla gecko
firefox
thunderbird 		Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate … CWE-20
 Improper Input Validation  		CVE-2011-2366 2024-11-21 10:28 2011-07-1 Show GitHub Exploit DB Packet Storm
307549 - reallysimplechat really_simple_chat Cross-site scripting (XSS) vulnerability in chat/base/admin/login.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_message parame… CWE-79
Cross-site Scripting 		CVE-2011-2470 2024-11-21 10:28 2011-06-30 Show GitHub Exploit DB Packet Storm
307550 - google
apple 		chrome
iphone_os
itunes
safari 		Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements. CWE-416
 Use After Free 		CVE-2011-2351 2024-11-21 10:28 2011-06-30 Show GitHub Exploit DB Packet Storm