Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5651 7.5 重要
Network 		GNU Project
レッドハット		 Red Hat Hardened Images
GnuTLS 		GNU Project等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-1584 2026-04-23 10:15 2026-04-9 Show GitHub Exploit DB Packet Storm
5652 7.5 重要
Network 		レッドハット
p11-kit project		 p11-kit
Red Hat Hardened Images
Red Hat Enterprise Linux 		p11-kit project等の複数ベンダの製品における初期化されていないポインタのアクセスに関する脆弱性 CWE-824
初期化されていないポインタのアクセス 		CVE-2026-2100 2026-04-23 10:15 2026-03-26 Show GitHub Exploit DB Packet Storm
5653 9.6 緊急
Network 		Imagination Technologies Limited GPU DDK Imagination Technologies LimitedのGPU DDKにおける複数の脆弱性 CWE-787
CWE-823
CVE-2026-21732 2026-04-23 10:15 2026-03-20 Show GitHub Exploit DB Packet Storm
5654 7.8 重要
Local 		Imagination Technologies Limited GPU DDK Imagination Technologies LimitedのGPU DDKにおける同期の欠如に関する脆弱性 CWE-820
同期の欠如 		CVE-2026-22163 2026-04-23 10:15 2026-03-20 Show GitHub Exploit DB Packet Storm
5655 6.8 警告
Network 		OctoberCMS October OctoberCMSのOctoberにおける複数の脆弱性 CWE-284
CWE-693
CVE-2026-22692 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
5656 5.5 警告
Local 		gimp gimp gimpにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-2271 2026-04-23 10:15 2026-03-26 Show GitHub Exploit DB Packet Storm
5657 8.2 重要
Network 		GNOME Project
レッドハット		 libsoup
Red Hat Enterprise Linux 		GNOME Project等の複数ベンダの製品における期限切れのポインタデリファレンスに関する脆弱性 CWE-825
期限切れのポインタデリファレンス 		CVE-2026-2436 2026-04-23 10:15 2026-03-26 Show GitHub Exploit DB Packet Storm
5658 5.4 警告
Network 		OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24906 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
5659 5.4 警告
Network 		OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24907 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
5660 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおけるリクエストの直接送信に関する脆弱性 CWE-425
リクエストの直接送信 		CVE-2026-25679 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 7.3 HIGH
Network 		- - A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-11437 2026-06-7 02:16 2026-06-7 Show GitHub Exploit DB Packet Storm
12 4.2 MEDIUM
Network 		google chrome Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted … New CWE-290
CWE-451
 Authentication Bypass by Spoofing
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-11001 2026-06-7 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
13 6.1 MEDIUM
Network 		google chrome Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from proces… New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-10999 2026-06-7 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
14 6.5 MEDIUM
Network 		google chrome Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium securit… New CWE-457
 Use of Uninitialized Variable 		CVE-2026-10994 2026-06-7 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
15 6.5 MEDIUM
Network 		google chrome Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium secur… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-10993 2026-06-7 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
16 6.5 MEDIUM
Network 		google chrome Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (C… New NVD-CWE-noinfo
CWE-20
 Improper Input Validation  		CVE-2026-10992 2026-06-7 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
17 8.3 HIGH
Network 		google chrome Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr… New CWE-416
 Use After Free 		CVE-2026-10990 2026-06-7 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
18 4.3 MEDIUM
Network 		- - A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performi… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-11436 2026-06-7 01:16 2026-06-7 Show GitHub Exploit DB Packet Storm
19 7.3 HIGH
Network 		- - A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The at… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-11435 2026-06-7 01:16 2026-06-7 Show GitHub Exploit DB Packet Storm
20 2.4 LOW
Network 		- - A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cross site scripting.… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-11434 2026-06-7 00:16 2026-06-7 Show GitHub Exploit DB Packet Storm