Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3481	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-11252	2026-06-8 12:33	2026-06-5	Show	GitHub Exploit DB Packet Storm

3482	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-11253	2026-06-8 12:33	2026-06-5	Show	GitHub Exploit DB Packet Storm

3483	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-11254	2026-06-8 12:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

3484	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11255	2026-06-8 12:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

3485	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-11256	2026-06-8 12:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

3486	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11262	2026-06-8 12:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

3487	5.1	警告 Local	Google	Google Chrome	GoogleのGoogle Chromeにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-11276	2026-06-8 12:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

3488	6.7	警告 Local	シスコシステムズ	Adaptive Security Appliance (ASA) Software Cisco Firepower Threat Defense ソフトウェア	シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-20016	2026-06-8 12:32	2026-03-4	Show	GitHub Exploit DB Packet Storm

3489	6.8	警告 Adjacent	シスコシステムズ	Adaptive Security Appliance (ASA) Software Cisco Firepower Threat Defense ソフトウェア	シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-20025	2026-06-8 12:32	2026-03-4	Show	GitHub Exploit DB Packet Storm

3490	5.5	警告 Local	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-Other その他	CVE-2026-21017	2026-06-8 12:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 2, 2026, 4:03 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306731	-	smartycms	smartycms	Cross-site scripting (XSS) vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar.	CWE-79 Cross-site Scripting	CVE-2012-1066	2024-11-21 10:36	2012-02-15	Show	GitHub Exploit DB Packet Storm

306732	-	2x	applicationserver	Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote attackers to create or overwrite arbitrary files via the Expor…	NVD-CWE-Other	CVE-2012-1065	2024-11-21 10:36	2012-02-15	Show	GitHub Exploit DB Packet Storm

306733	-	netsarang	xmanager_enterprise xlpd	NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request.	NVD-CWE-noinfo	CVE-2012-1009	2024-11-21 10:36	2012-02-15	Show	GitHub Exploit DB Packet Storm

306734	-	manageengine	applications_manager	Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or…	CWE-89 SQL Injection	CVE-2012-1063	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

306735	-	manageengine	applications_manager	Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to sho…	CWE-79 Cross-site Scripting	CVE-2012-1062	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

306736	-	gforgegroup	gforge	SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2012-1061	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

306737	-	rik_de_boer	revisioning	Multiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authe…	CWE-79 Cross-site Scripting	CVE-2012-1060	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

306738	-	oscommerce	online_merchant	Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-1059	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

306739	-	flyspray	flyspray	Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to …	CWE-352 Origin Validation Error	CVE-2012-1058	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

306740	-	sean_robertson	forward	Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers …	CWE-352 Origin Validation Error	CVE-2012-1057	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm