Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1091	5.4	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-11157	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1092	8.6	重要 Local	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11158	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1093	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-11159	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1094	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-11160	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1095	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-11161	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1096	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-11162	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1097	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11163	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1098	6.8	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-11166	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1099	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-11167	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1100	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-11168	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255401	7.5	HIGH Network	extraputty	extraputty	The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large (1) read or (2) write TFTP protocol message.	CWE-20 Improper Input Validation	CVE-2017-7183	2024-11-21 12:31	2017-03-28	Show	GitHub Exploit DB Packet Storm

255402	6.1	MEDIUM Network	netflix	security_monkey	Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.	CWE-601 Open Redirect	CVE-2017-7266	2024-11-21 12:31	2017-03-26	Show	GitHub Exploit DB Packet Storm

255403	7.8	HIGH Local	artifex	mupdf	Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unsp…	CWE-416 Use After Free	CVE-2017-7264	2024-11-21 12:31	2017-03-26	Show	GitHub Exploit DB Packet Storm

255404	7.8	HIGH Local	potrace_project	potrace	The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other…	CWE-125 Out-of-bounds Read	CVE-2017-7263	2024-11-21 12:31	2017-03-26	Show	GitHub Exploit DB Packet Storm

255405	5.5	MEDIUM Local	amd	ryzen	The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demo…	CWE-20 Improper Input Validation	CVE-2017-7262	2024-11-21 12:31	2017-03-25	Show	GitHub Exploit DB Packet Storm

255406	5.5	MEDIUM Local	linux	linux_kernel	The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to…	CWE-20 Improper Input Validation	CVE-2017-7261	2024-11-21 12:31	2017-03-25	Show	GitHub Exploit DB Packet Storm

255407	5.4	MEDIUM Network	cmsmadesimple	cms_made_simple	XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. Someone must login to conduct the attack.	CWE-79 Cross-site Scripting	CVE-2017-7257	2024-11-21 12:31	2017-03-25	Show	GitHub Exploit DB Packet Storm

255408	5.4	MEDIUM Network	cmsmadesimple	cms_made_simple	XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct the attack.	CWE-79 Cross-site Scripting	CVE-2017-7256	2024-11-21 12:31	2017-03-25	Show	GitHub Exploit DB Packet Storm

255409	5.4	MEDIUM Network	cmsmadesimple	cms_made_simple	XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter. Someone must login to conduct the attack.	CWE-79 Cross-site Scripting	CVE-2017-7255	2024-11-21 12:31	2017-03-25	Show	GitHub Exploit DB Packet Storm

255410	7.5	HIGH Network	eclipse	tinydtls	Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake.	CWE-476 NULL Pointer Dereference	CVE-2017-7243	2024-11-21 12:31	2017-03-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed