Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
881 5.4 警告
Network 		langflow Langflow Desktop langflowのLangflow Desktopにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-3341 2026-06-17 15:46 2026-06-11 Show GitHub Exploit DB Packet Storm
882 6.1 警告
Network 		IBM IBM DevOps Plan IBMのIBM DevOps PlanにおけるHTTP ヘッダのスクリプト構文の不適切な無効化に関する脆弱性 CWE-644
HTTP ヘッダのスクリプト構文の不適切な無効化 		CVE-2026-4096 2026-06-17 15:46 2026-06-11 Show GitHub Exploit DB Packet Storm
883 5.4 警告
Network 		VMware VMware Cloud Foundation
VMware Telco Cloud Platform
VMware vSphere
VMware Aria Operations 		VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2026-41722 2026-06-17 15:46 2026-06-8 Show GitHub Exploit DB Packet Storm
884 8 重要
Network 		VMware VMware Cloud Foundation
VMware Telco Cloud Platform
VMware vSphere
VMware Aria Operations 		VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41723 2026-06-17 15:46 2026-06-8 Show GitHub Exploit DB Packet Storm
885 5.9 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42767 2026-06-17 15:46 2026-06-9 Show GitHub Exploit DB Packet Storm
886 3.7 低
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける暗号化処理の不備に関する脆弱性 CWE-325
暗号化処理の不備 		CVE-2026-42770 2026-06-17 15:46 2026-06-9 Show GitHub Exploit DB Packet Storm
887 6.2 警告
Local 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-42771 2026-06-17 15:46 2026-06-9 Show GitHub Exploit DB Packet Storm
888 8.8 重要
Network 		Kovidgoyal Kitty KovidgoyalのKittyにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-42850 2026-06-17 15:46 2026-06-12 Show GitHub Exploit DB Packet Storm
889 7.8 重要
Local 		Kovidgoyal Kitty KovidgoyalのKittyにおける複数の脆弱性 CWE-862
CWE-94
CVE-2026-42851 2026-06-17 15:46 2026-06-12 Show GitHub Exploit DB Packet Storm
890 9.8 緊急
Network 		MariaDB Corporation Ab. MariaDB MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-44170 2026-06-17 15:46 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257121 8.8 HIGH
Network 		google
debian 		chrome
debian_linux 		Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-5122 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257122 8.8 HIGH
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… CWE-20
 Improper Input Validation  		CVE-2017-5121 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257123 6.5 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potent… NVD-CWE-noinfo
CVE-2017-5120 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257124 4.3 MEDIUM
Network 		google
debian 		chrome
debian_linux 		Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive infor… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-5119 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257125 4.3 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remo… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-5118 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257126 6.5 MEDIUM
Network 		google
debian 		chrome
debian_linux 		Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a craf… CWE-200
Information Exposure 		CVE-2017-5117 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257127 8.8 HIGH
Network 		google
redhat
debian 		chrome
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a craft… CWE-843
Type Confusion 		CVE-2017-5116 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257128 8.8 HIGH
Network 		google chrome Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. CWE-704
 Incorrect Type Conversion or Cast 		CVE-2017-5115 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257129 8.8 HIGH
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memor… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-5114 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm
257130 8.8 HIGH
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted … CWE-787
 Out-of-bounds Write 		CVE-2017-5113 2024-11-21 12:27 2017-10-27 Show GitHub Exploit DB Packet Storm