Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5731 6.5 警告
Adjacent
Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-7425 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
5732 8.1 重要
Adjacent
Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-7426 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
5733 5.4 警告
Network
レッドハット build of keycloak レッドハットのbuild of keycloakにおけるリクエストの直接送信に関する脆弱性 CWE-425
CWE-noinfo
CVE-2026-7500 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
5734 8.8 重要
Network
HKUDS OpenHarness HKUDSのOpenHarnessにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-7551 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
5735 9.8 緊急
Network
Synway SMG Gateway Management Software SynwayのSMG Gateway Management SoftwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-71284 2026-05-7 10:53 2026-04-30 Show GitHub Exploit DB Packet Storm
5736 7.8 重要
Local
KDE project KCoreAddons KDE projectのKCoreAddonsにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化
CVE-2026-41526 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
5737 8.8 重要
Network
SailPoint Technologies Holdings, Inc. IdentityIQ SailPoint Technologies Holdings, Inc.のIdentityIQにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5712 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
5738 5.5 警告
Local
Canonical pdfunite Canonicalのpdfuniteにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2018-25306 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
5739 9.8 緊急
Network
Kvcache-ai Ktransformers Kvcache-aiのKtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-26210 2026-05-7 10:53 2026-04-23 Show GitHub Exploit DB Packet Storm
5740 7.1 重要
Local
デル Dell/Alienware Purchased Apps デルのDell/Alienware Purchased Appsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-27105 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2101 - - - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields… CWE-113
HTTP Response Splitting
CVE-2026-43966 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
2102 8.8 HIGH
Network
google chrome Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion
CVE-2026-11662 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2103 8.3 HIGH
Network
google chrome Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch… CWE-416
 Use After Free
CVE-2026-11663 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2104 8.8 HIGH
Network
google chrome Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-11664 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2105 4.3 MEDIUM
Network
google chrome Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) CWE-125
Out-of-bounds Read
CVE-2026-11665 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2106 8.3 HIGH
Network
google chrome Use after free in Read Anything in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML … CWE-416
 Use After Free
CVE-2026-11692 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2107 3.1 LOW
Network
google chrome Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a … CWE-20
 Improper Input Validation 
CVE-2026-11691 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2108 8.3 HIGH
Network
google chrome Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-11655 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2109 8.3 HIGH
Network
google chrome Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafte… CWE-416
 Use After Free
CVE-2026-11656 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
2110 8.8 HIGH
Network
google chrome Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-11657 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm