Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4001 7.5 重要
Network 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品におけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2025-46311 2026-05-14 10:23 2026-05-12 Show GitHub Exploit DB Packet Storm
4002 4.7 警告
Network 		ISPConfig ISPConfig ISPConfigにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-52206 2026-05-14 10:23 2026-05-5 Show GitHub Exploit DB Packet Storm
4003 7.3 重要
Network 		AstrBot AstrBot AstrBotにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2025-55449 2026-05-14 10:23 2026-05-8 Show GitHub Exploit DB Packet Storm
4004 7.2 重要
Network 		Check MK Check MK Check MKにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2025-64998 2026-05-14 10:22 2026-03-24 Show GitHub Exploit DB Packet Storm
4005 6.5 警告
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2025-66171 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
4006 8.1 重要
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2025-66172 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
4007 7.2 重要
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2025-67486 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
4008 9.1 緊急
Network 		Electric Sheep Fencing pfSense Electric Sheep FencingのpfSenseにおける複数の脆弱性 CWE-502
CWE-915
CVE-2025-69690 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
4009 9.9 緊急
Network 		Electric Sheep Fencing pfSense Electric Sheep FencingのpfSenseにおける複数の脆弱性 CWE-284
CWE-915
CVE-2025-69691 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
4010 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71271 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306611 - google chrome Google V8, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-boun… CWE-787
 Out-of-bounds Write 		CVE-2011-2828 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306612 - google
apple 		chrome
iphone_os
itunes
safari 		Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text searching. CWE-416
 Use After Free 		CVE-2011-2827 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306613 - google chrome Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins. NVD-CWE-noinfo
CVE-2011-2826 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306614 - google
apple 		chrome
iphone_os
itunes
safari 		Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving custom fonts. CWE-416
 Use After Free 		CVE-2011-2825 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306615 - google chrome Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes. CWE-416
 Use After Free 		CVE-2011-2824 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306616 - google
apple 		chrome
iphone_os
itunes
safari 		Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a line box. CWE-416
 Use After Free 		CVE-2011-2823 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306617 - google chrome Google Chrome before 13.0.782.215 on Windows does not properly parse URLs located on the command line, which has unspecified impact and attack vectors. CWE-20
 Improper Input Validation  		CVE-2011-2822 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306618 - google
debian
redhat
apple 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
iphone_os
mac_os_x 		Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath … CWE-415
 Double Free 		CVE-2011-2821 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306619 - google chrome Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspeci… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2806 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306620 - php php The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via a… CWE-310
Cryptographic Issues 		CVE-2011-3189 2024-11-21 10:29 2011-08-25 Show GitHub Exploit DB Packet Storm