Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1071	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11165	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1072	6.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-11181	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1073	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11189	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1074	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-11190	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1075	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-11191	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1076	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11192	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1077	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-11193	2026-06-10 14:33	2026-06-4	Show	GitHub Exploit DB Packet Storm

1078	4.7	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11233	2026-06-10 14:32	2026-06-4	Show	GitHub Exploit DB Packet Storm

1079	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11234	2026-06-10 14:32	2026-06-4	Show	GitHub Exploit DB Packet Storm

1080	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11235	2026-06-10 14:32	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255751	7.5	HIGH Network	starscream_project	starscream	WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).	CWE-295 Improper Certificate Validation	CVE-2017-7192	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255752	5.5	MEDIUM Local	entropymine	imageworsener	The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-7454	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255753	5.5	MEDIUM Local	entropymine	imageworsener	The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-7453	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255754	5.5	MEDIUM Local	entropymine	imageworsener	The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-7452	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255755	9.8	CRITICAL Network	airtame	hdmi_dongle_firmware	AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot,…	CWE-287 Improper Authentication	CVE-2017-7450	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255756	5.5	MEDIUM Local	dropbox	lepton	The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a…	CWE-369 Divide By Zero	CVE-2017-7448	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255757	8.8	HIGH Network	helpdezk	helpdezk	HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.	CWE-352 Origin Validation Error	CVE-2017-7447	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255758	8.8	HIGH Network	helpdezk	helpdezk	HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.	CWE-352 Origin Validation Error	CVE-2017-7446	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255759	7.8	HIGH Local	veritas	system_recovery	In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed.	NVD-CWE-noinfo	CVE-2017-7444	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255760	6.1	MEDIUM Network	apt-cacher_project apt-cacher-ng_project	apt-cacher apt-cacher-ng	apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.	CWE-113 HTTP Response Splitting	CVE-2017-7443	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed