Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
141 6.5 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける複数の脆弱性 New CWE-20
CWE-602
CVE-2026-11287 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
142 4.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性 New CWE-346
同一生成元ポリシー違反
CVE-2026-11291 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
143 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理
CVE-2026-11295 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
144 7.7 重要
Local
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認
CVE-2026-11297 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
145 4.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 New CWE-451
ユーザインターフェースにおける重要情報の誤った表示
CVE-2026-11300 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
146 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-11301 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
147 4.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御
CVE-2026-11302 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
148 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-11303 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
149 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-11304 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
150 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-11305 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319391 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: don't reissue in case of poll race on multishot request A previous commit fixed a poll race that can occur, but it… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2023-52895 2024-09-12 01:31 2024-08-21 Show GitHub Exploit DB Packet Storm
319392 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() In Google internal bug 265639009 we've received an (as yet) unr… CWE-476
 NULL Pointer Dereference
CVE-2023-52894 2024-09-12 01:27 2024-08-21 Show GitHub Exploit DB Packet Storm
319393 - - - An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 through 7.2.2, 7.0.0 through 7.0.3 change password endpoint may allow an authent… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2024-45327 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
319394 - - - A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unknown part of the file /web-static/. The manipulation leads to files or director… CWE-552
 Files or Directories Accessible to External Parties
CVE-2024-8655 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
319395 - - - SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8232 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
319396 - - - Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authenticatio… CWE-524
 Use of Cache Containing Sensitive Information
CVE-2024-45596 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
319397 - - - cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component. - CVE-2024-34831 2024-09-12 01:26 2024-09-11 Show GitHub Exploit DB Packet Storm
319398 6.5 MEDIUM
Network
mozilla thunderbird When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2. CWE-416
 Use After Free
CVE-2024-8394 2024-09-12 01:25 2024-09-7 Show GitHub Exploit DB Packet Storm
319399 8.8 HIGH
Network
draytek vigor3900_firmware DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string function. CWE-78
OS Command 
CVE-2024-44845 2024-09-12 01:24 2024-09-7 Show GitHub Exploit DB Packet Storm
319400 8.8 HIGH
Network
draytek vigor3900_firmware DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function. CWE-78
OS Command 
CVE-2024-44844 2024-09-12 01:24 2024-09-7 Show GitHub Exploit DB Packet Storm