Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3931	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-7936	2026-05-8 12:18	2026-05-6	Show	GitHub Exploit DB Packet Storm

3932	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-7937	2026-05-8 12:18	2026-05-6	Show	GitHub Exploit DB Packet Storm

3933	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7938	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

3934	5.4	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-7939	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

3935	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7940	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

3936	4.4	警告 Local	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-7941	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

3937	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-7942	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

3938	4.2	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-7943	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

3939	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-7944	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

3940	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-7945	2026-05-8 12:17	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
571	8.2	HIGH Network	-	-	Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parame… New	CWE-89 SQL Injection	CVE-2017-20245	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

572	8.2	HIGH Network	-	-	KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can i… New	CWE-89 SQL Injection	CVE-2017-20246	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

573	8.2	HIGH Network	-	-	WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid para… New	CWE-89 SQL Injection	CVE-2017-20247	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

574	7.5	HIGH Network	-	-	Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests … New	CWE-22 Path Traversal	CVE-2017-20248	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

575	8.2	HIGH Network	-	-	Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attac… New	CWE-89 SQL Injection	CVE-2017-20249	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

576	7.5	HIGH Network	-	-	Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to mac… New	CWE-22 Path Traversal	CVE-2017-20250	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

577	9.8	CRITICAL Network	-	-	WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes thro… New	CWE-94 Code Injection	CVE-2017-20251	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

578	-		-	-	bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompres… New	CWE-121 Stack-based Buffer Overflow	CVE-2026-9669	2026-06-9 22:49	2026-06-9	Show	GitHub Exploit DB Packet Storm

579	7.8	HIGH Local	-	-	A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inse… New	CWE-74 CWE-94 CWE-116 Injection Code Injection Improper Encoding or Escaping of Output	CVE-2026-8795	2026-06-9 22:49	2026-06-9	Show	GitHub Exploit DB Packet Storm

580	-		-	-	A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We hav… New	CWE-862 Missing Authorization	CVE-2026-26236	2026-06-9 22:49	2026-06-9	Show	GitHub Exploit DB Packet Storm