Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
691	5.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-11004	2026-06-9 14:09	2026-06-4	Show	GitHub Exploit DB Packet Storm

692	7.8	重要 Local	株式会社アルコム	CamView	CamViewのインストーラにおけるDLL読み込みに関する脆弱性 New	CWE-Other その他	CVE-2015-9268	2026-06-9 12:14	2026-06-9	Show	GitHub Exploit DB Packet Storm

693	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年06月04日）	-	-	2026-06-8 14:51	2026-06-5	Show	GitHub Exploit DB Packet Storm

694	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-10929	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

695	8.1	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-10930	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

696	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10931	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

697	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10932	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

698	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10933	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

699	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10934	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

700	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-10935	2026-06-8 12:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2981	5.4	MEDIUM Network	-	-	The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to, and including, 3.1 due to insu…	CWE-79 Cross-site Scripting	CVE-2026-5191	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2982	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Con…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-53440	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2983	7.5	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local File Inclusion. This issue affec…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-58024	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2984	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-58705	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2985	8.1	HIGH Network	-	-	Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6.	CWE-502 Deserialization of Untrusted Data	CVE-2026-39550	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2986	8.1	HIGH Network	-	-	Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1.	CWE-502 Deserialization of Untrusted Data	CVE-2026-39551	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2987	7.5	HIGH Network	-	-	Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0.	CWE-862 Missing Authorization	CVE-2026-42669	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2988	9.3	CRITICAL Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a throu…	CWE-89 SQL Injection	CVE-2026-42684	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2989	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS. This issue affects WP Job Portal: from n/a through 2.5…	CWE-79 Cross-site Scripting	CVE-2026-42685	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

2990	6.5	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin	CWE-863 Incorrect Authorization	CVE-2026-49376	2026-06-2 21:39	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed