Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4081 7.4 重要
Network
go-git project go-git go-git projectのgo-gitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護
CVE-2026-41506 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4082 8.1 重要
Network
Andreas Kloeckner RELATE Andreas KloecknerのRELATEにおける複数の脆弱性 CWE-203
CWE-208
CVE-2026-41588 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4083 8.8 重要
Network
NocoBase NocoBase NocoBaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-41640 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
4084 6.1 警告
Network
fast-xml-parser project fast-xml-parser Natural Intelligenceのfast-xml-parserにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション
CVE-2026-41650 2026-05-14 10:18 2026-05-7 Show GitHub Exploit DB Packet Storm
4085 4.4 警告
Local
Anthropic PBC Claude SDK for TypeScript (anthropic-ai/sdk) Anthropic PBCのClaude SDK for TypeScript (anthropic-ai/sdk)における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-41686 2026-05-14 10:18 2026-05-4 Show GitHub Exploit DB Packet Storm
4086 8.6 重要
Network
VMware Spring AI VMwareのSpring AIにおける言語構文の表現に使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-917
言語構文の表現に使用される特殊な要素の不適切な無効化
CVE-2026-41705 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
4087 7.5 重要
Network
VMware Spring AI VMwareのSpring AIにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2026-41712 2026-05-14 10:18 2026-05-12 Show GitHub Exploit DB Packet Storm
4088 8.2 重要
Network
VMware Spring AI VMwareのSpring AIにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化
CVE-2026-41713 2026-05-14 10:18 2026-05-12 Show GitHub Exploit DB Packet Storm
4089 6.5 警告
Network
LangGenius Dify LangGeniusのDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-41950 2026-05-14 10:18 2026-05-5 Show GitHub Exploit DB Packet Storm
4090 9.6 緊急
Network
Streetwriters Notesnook Mobile
Notesnook Desktop
StreetwritersのNotesnook Desktop等の複数製品における複数の脆弱性 CWE-79
CWE-94
CVE-2026-42090 2026-05-14 10:18 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306471 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of … CWE-416
 Use After Free
CVE-2011-3041 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306472 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document. CWE-125
Out-of-bounds Read
CVE-2011-3040 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306473 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling. CWE-416
 Use After Free
CVE-2011-3039 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306474 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column han… CWE-416
 Use After Free
CVE-2011-3038 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306475 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possi… CWE-704
 Incorrect Type Conversion or Cast
CVE-2011-3037 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306476 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have… CWE-704
 Incorrect Type Conversion or Cast
CVE-2011-3036 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306477 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements. CWE-416
 Use After Free
CVE-2011-3035 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306478 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG document. CWE-416
 Use After Free
CVE-2011-3034 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306479 - google
opensuse
chrome
opensuse
Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. CWE-120
Classic Buffer Overflow
CVE-2011-3033 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm
306480 - google
opensuse
apple
chrome
opensuse
itunes
safari
iphone_os
Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of … CWE-416
 Use After Free
CVE-2011-3032 2024-11-21 10:29 2012-03-6 Show GitHub Exploit DB Packet Storm