Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
781	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11683	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

782	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11684	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

783	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11685	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

784	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11686	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

785	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11687	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

786	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-11688	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

787	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける複数の脆弱性	CWE-125 CWE-787	CVE-2026-11690	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

788	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11691	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

789	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11692	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

790	8.1	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-11693	2026-06-10 14:28	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258391	7.8	HIGH Local	ipa	casl_ii_simulator	Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	CWE-426 Untrusted Search Path	CVE-2017-2220	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258392	7.8	HIGH Local	apple	quicktime	Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	CWE-426 Untrusted Search Path	CVE-2017-2218	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258393	6.1	MEDIUM Network	wpdownloadmanager	wordpress_download_manager	Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.	CWE-601 Open Redirect	CVE-2017-2217	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258394	6.1	MEDIUM Network	wpdownloadmanager	wordpress_download_manager	Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2017-2216	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258395	7.8	HIGH Local	e-tax.nta	e-tax	Untrusted search path vulnerability in Installer of "Setup file of advance preparation" (jizen_setup.exe) (The version which was available on the website prior to 2017 June 12) allows an attacker to …	CWE-426 Untrusted Search Path	CVE-2017-2215	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258396	7.8	HIGH Local	acquisition_technology_and_logistics_agency	installer_of_electronic_tendering	Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted e…	CWE-426 Untrusted Search Path	CVE-2017-2208	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258397	6.1	MEDIUM Network	ipa	icodechecker	Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2017-2194	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258398	7.8	HIGH Local	maff	denshinouhin_check_system	Untrusted search path vulnerability in Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) 2014 March Edition (Ver.9.0.001.001) [Updated o…	CWE-426 Untrusted Search Path	CVE-2017-2188	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258399	8.8	HIGH Adjacent	kddi	home_spot_cube_2_firmware	HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI.	CWE-287 Improper Authentication	CVE-2017-2186	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

258400	8.8	HIGH Adjacent	kddi	home_spot_cube_2_firmware	HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.	CWE-78 OS Command	CVE-2017-2185	2024-11-21 12:23	2017-07-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed