Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3071	9.8	緊急 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33519	2026-05-20 13:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

3072	5.3	警告 Adjacent	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるリソースの挿入に関する脆弱性	CWE-99 リソースの挿入	CVE-2026-33603	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3073	6.1	警告 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33862	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3074	7.5	重要 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-33893	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3075	5.3	警告 Network	MediaWiki	MediaWiki	MediaWikiにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-34093	2026-05-20 13:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

3076	3.8	低 Network	MediaWiki	MediaWiki	MediaWikiにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-34094	2026-05-20 13:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

3077	8.1	重要 Network	Apache Software Foundation	Apache Flink	Apache Software FoundationのApache Flinkにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-35194	2026-05-20 13:20	2026-05-15	Show	GitHub Exploit DB Packet Storm

3078	4.3	警告 Network	マイクロソフト	Microsoft Edge	Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-35429	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3079	7.8	重要 Local	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-37525	2026-05-20 13:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

3080	7.8	重要 Local	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-37526	2026-05-20 13:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306371	-	google opensuse apple	chrome opensuse itunes safari iphone_os	Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column han…	CWE-416 Use After Free	CVE-2011-3038	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306372	-	google opensuse apple	chrome opensuse itunes safari iphone_os	Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possi…	CWE-704 Incorrect Type Conversion or Cast	CVE-2011-3037	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306373	-	google opensuse apple	chrome opensuse itunes safari iphone_os	Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have…	CWE-704 Incorrect Type Conversion or Cast	CVE-2011-3036	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306374	-	google opensuse apple	chrome opensuse itunes safari iphone_os	Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.	CWE-416 Use After Free	CVE-2011-3035	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306375	-	google opensuse apple	chrome opensuse itunes safari iphone_os	Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG document.	CWE-416 Use After Free	CVE-2011-3034	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306376	-	google opensuse	chrome opensuse	Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.	CWE-120 Classic Buffer Overflow	CVE-2011-3033	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306377	-	google opensuse apple	chrome opensuse itunes safari iphone_os	Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of …	CWE-416 Use After Free	CVE-2011-3032	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306378	-	google opensuse	chrome opensuse	Use-after-free vulnerability in the element wrapper in Google V8, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other …	CWE-416 Use After Free	CVE-2011-3031	2024-11-21 10:29	2012-03-6	Show	GitHub Exploit DB Packet Storm

306379	-	google apple	chrome itunes safari iphone_os	Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have un…	CWE-704 Incorrect Type Conversion or Cast	CVE-2011-3027	2024-11-21 10:29	2012-02-17	Show	GitHub Exploit DB Packet Storm

306380	-	google apple suse opensuse	chrome mac_os_x mac_os_x_server iphone_os linux_enterprise_server opensuse suse_linux_enterprise_server	Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigge…	CWE-190 Integer Overflow or Wraparound	CVE-2011-3026	2024-11-21 10:29	2012-02-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed