Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1051	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-10946	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1052	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10947	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1053	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10948	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1054	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-10949	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1055	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10954	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1056	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10956	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1057	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11023	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1058	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-11024	2026-06-10 14:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1059	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるサーバ側のセキュリティのクライアント側での実施に関する脆弱性	CWE-602 サーバ側のセキュリティのクライアント側での実施	CVE-2026-11025	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1060	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-11096	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255751	7.5	HIGH Network	starscream_project	starscream	WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).	CWE-295 Improper Certificate Validation	CVE-2017-7192	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255752	5.5	MEDIUM Local	entropymine	imageworsener	The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-7454	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255753	5.5	MEDIUM Local	entropymine	imageworsener	The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-7453	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255754	5.5	MEDIUM Local	entropymine	imageworsener	The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-7452	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255755	9.8	CRITICAL Network	airtame	hdmi_dongle_firmware	AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot,…	CWE-287 Improper Authentication	CVE-2017-7450	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255756	5.5	MEDIUM Local	dropbox	lepton	The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a…	CWE-369 Divide By Zero	CVE-2017-7448	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255757	8.8	HIGH Network	helpdezk	helpdezk	HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.	CWE-352 Origin Validation Error	CVE-2017-7447	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255758	8.8	HIGH Network	helpdezk	helpdezk	HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.	CWE-352 Origin Validation Error	CVE-2017-7446	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255759	7.8	HIGH Local	veritas	system_recovery	In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed.	NVD-CWE-noinfo	CVE-2017-7444	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255760	6.1	MEDIUM Network	apt-cacher_project apt-cacher-ng_project	apt-cacher apt-cacher-ng	apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.	CWE-113 HTTP Response Splitting	CVE-2017-7443	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed