Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232941 10 危険 xeforum - Xeweb XEForum における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3500 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
232942 6.4 警告 slackroll - SlackRoll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3499 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
232943 4.3 警告 SAP - SAP NetWeaver Nw04 の BC-WD-JAV におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3496 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
232944 4.3 警告 SAP - SAP Basis コンポーネントの BC-MID-ICF におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3495 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
232945 7.5 危険 Progress Software Corporation - Progress Software OpenEdge の _mprosrv におけるバッファオーバーフローの脆弱性 - CVE-2007-3491 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
232946 4.3 警告 Yandex - Yandex Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3485 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
232947 10 危険 BlackBerry - Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性 - CVE-2007-3483 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
232948 7.8 危険 VideoLAN - VideoLAN VLC Media Player の input.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3468 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
232949 7.8 危険 VideoLAN - VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性 - CVE-2007-3467 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
232950 10 危険 sofaware - Check Point SofaWare Safe@Office における特定のデフォルトパスワードを含む脆弱性 - CVE-2007-3465 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1101 8.0 HIGH
Network 		- - VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri… New CWE-79
Cross-site Scripting 		CVE-2026-41723 2026-06-9 22:16 2026-06-8 Show GitHub Exploit DB Packet Storm
1102 8.0 HIGH
Network 		- - VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri… New CWE-79
Cross-site Scripting 		CVE-2026-41722 2026-06-9 22:16 2026-06-8 Show GitHub Exploit DB Packet Storm
1103 6.5 MEDIUM
Network 		google chrome Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via… Update CWE-284
Improper Access Control 		CVE-2026-11190 2026-06-9 21:51 2026-06-5 Show GitHub Exploit DB Packet Storm
1104 6.5 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restricti… Update CWE-20
 Improper Input Validation  		CVE-2026-11189 2026-06-9 21:51 2026-06-5 Show GitHub Exploit DB Packet Storm
1105 8.8 HIGH
Network 		google chrome Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security s… Update CWE-125
Out-of-bounds Read 		CVE-2026-11191 2026-06-9 21:50 2026-06-5 Show GitHub Exploit DB Packet Storm
1106 4.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium securi… Update CWE-20
 Improper Input Validation  		CVE-2026-11192 2026-06-9 21:49 2026-06-5 Show GitHub Exploit DB Packet Storm
1107 6.5 MEDIUM
Network 		google chrome Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium securit… Update CWE-284
Improper Access Control 		CVE-2026-11193 2026-06-9 21:49 2026-06-5 Show GitHub Exploit DB Packet Storm
1108 - - - In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields in struct io_waitid::… New - CVE-2026-46315 2026-06-9 18:16 2026-06-9 Show GitHub Exploit DB Packet Storm
1109 7.1 HIGH
Network 		- - A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources… Update CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-10840 2026-06-9 18:16 2026-06-4 Show GitHub Exploit DB Packet Storm
1110 3.3 LOW
Local 		- - A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to … Update CWE-200
CWE-284
Information Exposure
Improper Access Control 		CVE-2026-11459 2026-06-9 15:16 2026-06-7 Show GitHub Exploit DB Packet Storm