Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1491	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-10955	2026-06-9 14:09	2026-06-4	Show	GitHub Exploit DB Packet Storm

1492	5.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-11004	2026-06-9 14:09	2026-06-4	Show	GitHub Exploit DB Packet Storm

1493	7.8	重要 Local	株式会社アルコム	CamView	CamViewのインストーラにおけるDLL読み込みに関する脆弱性	CWE-Other その他	CVE-2015-9268	2026-06-9 12:14	2026-06-9	Show	GitHub Exploit DB Packet Storm

1494	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年06月04日）	-	-	2026-06-8 14:51	2026-06-5	Show	GitHub Exploit DB Packet Storm

1495	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-10929	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

1496	8.1	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-10930	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

1497	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10931	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

1498	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10932	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

1499	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10933	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

1500	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10934	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255471	8.8	HIGH Network	pivotx	pivotx	PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to ch…	CWE-94 Code Injection	CVE-2017-7570	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255472	9.8	CRITICAL Network	dragonwavex	horizon_wireless_radio_firmware	DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credent…	CWE-798 Use of Hard-coded Credentials	CVE-2017-7576	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255473	9.8	CRITICAL Network	schneider-electric	modicon_tm221ce16r_firmware	Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus p…	CWE-200 Information Exposure	CVE-2017-7575	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255474	9.8	CRITICAL Network	schneider-electric	modicon_tm221ce16r_firmware somachine	Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized…	CWE-798 Use of Hard-coded Credentials	CVE-2017-7574	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255475	8.0	HIGH Network	ladybirdweb	faveo_helpdesk	public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.	CWE-352 Origin Validation Error	CVE-2017-7571	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255476	8.6	HIGH Network	vbulletin	vbulletin	In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-7569	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255477	7.7	HIGH Network	mybb	mybb	MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-7566	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255478	8.8	HIGH Network	splunk	hadoop_connect	Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041.	CWE-22 Path Traversal	CVE-2017-7565	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255479	8.1	HIGH Network	backintime_project	backintime	The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condi…	CWE-362 Race Condition	CVE-2017-7572	2024-11-21 12:32	2017-04-7	Show	GitHub Exploit DB Packet Storm

255480	7.5	HIGH Network	botan_project	botan	bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2017-7252	2024-11-21 12:31	2023-11-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed