Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
571 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41838 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
572 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-41844 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
573 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41845 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
574 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41846 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
575 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-41847 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
576 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-41848 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
577 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41852 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
578 5.1 警告
Local 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-191
CVE-2026-42326 2026-06-12 14:53 2026-06-10 Show GitHub Exploit DB Packet Storm
579 7.5 重要
Network 		Svelte project Svelte Svelte projectのSvelteにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-42567 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
580 7.5 重要
Network 		Svelte project devalue Svelte projectのdevalueにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42570 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257611 6.1 MEDIUM
Network 		google
redhat
debian 		chrome
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force… CWE-79
Cross-site Scripting 		CVE-2017-5045 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257612 6.3 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bound… CWE-787
 Out-of-bounds Write 		CVE-2017-5044 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257613 8.8 HIGH
Network 		google
redhat
debian 		chrome
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a cra… CWE-416
 Use After Free 		CVE-2017-5043 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257614 5.7 MEDIUM
Adjacent 		google
redhat
debian 		chrome
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment… CWE-311
Missing Encryption of Sensitive Data 		CVE-2017-5042 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257615 4.3 MEDIUM
Network 		google chrome Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page. CWE-20
 Improper Input Validation  		CVE-2017-5041 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257616 4.3 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a craft… NVD-CWE-noinfo
CVE-2017-5040 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257617 7.8 HIGH
Local 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a craf… CWE-416
 Use After Free 		CVE-2017-5039 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257618 6.3 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a cra… CWE-416
 Use After Free 		CVE-2017-5038 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257619 7.8 HIGH
Local 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a… CWE-190
 Integer Overflow or Wraparound 		CVE-2017-5037 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257620 7.8 HIGH
Local 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF f… CWE-416
 Use After Free 		CVE-2017-5036 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm