Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1361	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-11257	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1362	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-11258	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1363	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11259	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1364	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11260	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1365	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11261	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1366	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11263	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1367	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11264	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1368	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-11265	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1369	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11266	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1370	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるサーバ側のセキュリティのクライアント側での実施に関する脆弱性	CWE-602 サーバ側のセキュリティのクライアント側での実施	CVE-2026-11267	2026-06-9 14:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255751	7.5	HIGH Network	starscream_project	starscream	WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).	CWE-295 Improper Certificate Validation	CVE-2017-7192	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255752	5.5	MEDIUM Local	entropymine	imageworsener	The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-7454	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255753	5.5	MEDIUM Local	entropymine	imageworsener	The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-7453	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255754	5.5	MEDIUM Local	entropymine	imageworsener	The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-7452	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255755	9.8	CRITICAL Network	airtame	hdmi_dongle_firmware	AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot,…	CWE-287 Improper Authentication	CVE-2017-7450	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255756	5.5	MEDIUM Local	dropbox	lepton	The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a…	CWE-369 Divide By Zero	CVE-2017-7448	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255757	8.8	HIGH Network	helpdezk	helpdezk	HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.	CWE-352 Origin Validation Error	CVE-2017-7447	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255758	8.8	HIGH Network	helpdezk	helpdezk	HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.	CWE-352 Origin Validation Error	CVE-2017-7446	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255759	7.8	HIGH Local	veritas	system_recovery	In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed.	NVD-CWE-noinfo	CVE-2017-7444	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

255760	6.1	MEDIUM Network	apt-cacher_project apt-cacher-ng_project	apt-cacher apt-cacher-ng	apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.	CWE-113 HTTP Response Splitting	CVE-2017-7443	2024-11-21 12:31	2017-04-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed