Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5221 5.4 警告
Network
wger wger wger Projectのwgerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-40353 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
5222 7.6 重要
Network
wger wger wger Projectのwgerにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-40474 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
5223 9 緊急
Network
Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40477 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
5224 9 緊急
Network
Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40478 2026-04-27 10:47 2026-04-17 Show GitHub Exploit DB Packet Storm
5225 7.1 重要
Local
Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-40599 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
5226 4.4 警告
Local
Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-40604 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
5227 4.8 警告
Network
mitmproxy mitmproxy mitmproxyにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション
CVE-2026-40606 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
5228 7.5 重要
Network
coturn project coturn coturn projectのcoturnにおける不正な型変換に関する脆弱性 CWE-704
不正な型変換またはキャスト
CVE-2026-40613 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
5229 8.8 重要
Network
goshs goshs goshsにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40876 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
5230 7.5 重要
Network
- NestJSにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-40879 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
571 8.8 HIGH
Adjacent
- - Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security s… New CWE-416
 Use After Free
CVE-2026-10888 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
572 8.3 HIGH
Network
- - Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.… New CWE-125
Out-of-bounds Read
CVE-2026-10889 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
573 8.8 HIGH
Adjacent
- - Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium securit… New CWE-416
 Use After Free
CVE-2026-10890 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
574 8.8 HIGH
Network
- - Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free
CVE-2026-10891 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
575 8.3 HIGH
Network
- - Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT… New CWE-416
 Use After Free
CVE-2026-10894 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
576 8.8 HIGH
Network
- - Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free
CVE-2026-10895 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
577 8.8 HIGH
Network
- - Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free
CVE-2026-10896 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
578 8.3 HIGH
Network
- - Stack buffer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page… New CWE-121
Stack-based Buffer Overflow
CVE-2026-10898 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
579 7.5 HIGH
Network
- - Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a … New CWE-416
 Use After Free
CVE-2026-10899 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
580 7.5 HIGH
Network
- - Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via … New CWE-416
 Use After Free
CVE-2026-10900 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm