Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247531 4.3 警告 Electric Sheep Fencing - BSD Perimeter pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1182 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
247532 4.3 警告 Centreon - Centreon の include/common/javascript/color_picker.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1179 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
247533 4.3 警告 Centreon - Centreon の include/doc/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1178 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
247534 7.5 危険 affiliate market - Affiliate Market の shop/detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1177 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
247535 9.3 危険 danskebank - Danske Bank e-Sec Control Module ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1107 2012-06-26 15:55 2009-04-16 Show GitHub Exploit DB Packet Storm
247536 2.6 注意 affiliate market - Affiliate Market の function/sideblock.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1176 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
247537 4.3 警告 flicks software - AuthentiX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1175 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
247538 4.3 警告 flicks software - AuthentiX の editUser.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1174 2012-06-26 15:55 2008-03-5 Show GitHub Exploit DB Packet Storm
247539 5 警告 Flyspray - Flyspray におけるユーザ名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2008-1166 2012-06-26 15:55 2008-02-24 Show GitHub Exploit DB Packet Storm
247540 4.3 警告 Flyspray - Flyspray におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1165 2012-06-26 15:55 2008-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1361 5.6 MEDIUM
Network
- - Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connecti… CWE-299
 Improper Check for Certificate Revocation
CVE-2026-6899 2026-06-10 00:25 2026-06-9 Show GitHub Exploit DB Packet Storm
1362 - - - Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such as running out of file descriptors. This condition can be triggered maliciously … CWE-755
 Improper Handling of Exceptional Conditions
CVE-2026-49232 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
1363 - - - Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2 PUSH_PROMISE authority. In gun_http2:push_promise_frame/7, the :… CWE-346
 Origin Validation Error
CVE-2026-43972 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
1364 - - - Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gun_http:handle/5,… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-43973 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
1365 - - - Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching Prot… CWE-841
 Improper Enforcement of Behavioral Workflow
CVE-2026-43974 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
1366 - - - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decompression-bomb respo… CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49755 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
1367 - - - Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via attacker-influenced part metadata. Req.Utils.encode_form_part/2 … CWE-93
CRLF Injection
CVE-2026-49756 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
1368 - - - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields… CWE-113
HTTP Response Splitting
CVE-2026-43966 2026-06-10 00:20 2026-06-9 Show GitHub Exploit DB Packet Storm
1369 8.8 HIGH
Network
google chrome Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion
CVE-2026-11662 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm
1370 8.3 HIGH
Network
google chrome Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch… CWE-416
 Use After Free
CVE-2026-11663 2026-06-9 23:58 2026-06-9 Show GitHub Exploit DB Packet Storm