Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228591 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2399 2013-07-26 12:07 2012-04-21 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 Pidgin - Pidgin の libpurple の MXit プロトコルプラグインにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-3374 2013-07-25 16:24 2012-07-5 Show GitHub Exploit DB Packet Storm
228593 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker における製品の鍵束の鍵の読み取り制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6581 2013-07-25 14:54 2012-10-25 Show GitHub Exploit DB Packet Storm
228594 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker におけるメッセージの生成元の詳細を偽装される脆弱性 CWE-310
暗号の問題 		CVE-2012-6580 2013-07-25 14:51 2012-10-25 Show GitHub Exploit DB Packet Storm
228595 6.4 警告 Best Practical Solutions - Best Practical Solutions Request Tracker における特定の送信メールに対して暗号化または署名を設定される脆弱性 CWE-310
暗号の問題 		CVE-2012-6579 2013-07-25 14:49 2012-10-25 Show GitHub Exploit DB Packet Storm
228596 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker におけるメッセージを偽装される脆弱性 CWE-310
暗号の問題 		CVE-2012-6578 2013-07-25 14:48 2012-10-25 Show GitHub Exploit DB Packet Storm
228597 5 警告 シスコシステムズ - Cisco Unified MeetingPlace Web Conferencing サーバにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3438 2013-07-25 14:02 2013-07-23 Show GitHub Exploit DB Packet Storm
228598 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5958 2013-07-24 17:04 2012-12-6 Show GitHub Exploit DB Packet Storm
228599 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5959 2013-07-24 17:04 2012-12-6 Show GitHub Exploit DB Packet Storm
228600 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5960 2013-07-24 17:03 2012-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4561 7.8 HIGH
Local 		x.org
redhat 		x_server
xwayland
enterprise_linux 		A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow… CWE-121
Stack-based Buffer Overflow 		CVE-2026-50256 2026-06-9 01:45 2026-06-5 Show GitHub Exploit DB Packet Storm
4562 4.3 MEDIUM
Network 		google chrome Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CWE-346
 Origin Validation Error 		CVE-2026-11309 2026-06-9 01:40 2026-06-5 Show GitHub Exploit DB Packet Storm
4563 6.5 MEDIUM
Network 		team net\ Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj… CWE-93
CRLF Injection 		CVE-2026-8722 2026-06-9 01:39 2026-06-4 Show GitHub Exploit DB Packet Storm
4564 7.7 HIGH
Local 		google chrome Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium… CWE-20
 Improper Input Validation  		CVE-2026-11297 2026-06-9 01:37 2026-06-5 Show GitHub Exploit DB Packet Storm
4565 7.5 HIGH
Network 		rrwo net\ Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network range… CWE-674
CWE-1287
 Uncontrolled Recursion
 Improper Validation of Specified Type of Input 		CVE-2026-49941 2026-06-9 01:37 2026-06-5 Show GitHub Exploit DB Packet Storm
4566 8.8 HIGH
Network 		google chrome Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severi… CWE-269
 Improper Privilege Management 		CVE-2026-11295 2026-06-9 01:37 2026-06-5 Show GitHub Exploit DB Packet Storm
4567 7.3 HIGH
Network 		rrwo net\ Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661), or non-digits, wh… CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-49942 2026-06-9 01:37 2026-06-5 Show GitHub Exploit DB Packet Storm
4568 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in Android Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security … CWE-346
 Origin Validation Error 		CVE-2026-11291 2026-06-9 01:37 2026-06-5 Show GitHub Exploit DB Packet Storm
4569 6.5 MEDIUM
Network 		rrwo net\ Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This… CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-49940 2026-06-9 01:35 2026-06-5 Show GitHub Exploit DB Packet Storm
4570 7.5 HIGH
Network 		sanbeg etsy\ Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj… CWE-93
CRLF Injection 		CVE-2026-46741 2026-06-9 01:33 2026-06-5 Show GitHub Exploit DB Packet Storm