Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
791	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-11168	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

792	8.1	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるブラインド XPath インジェクションの脆弱性	CWE-91 ブラインド XPath インジェクション	CVE-2026-11169	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

793	8.1	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11170	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

794	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-11172	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

795	5.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11174	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

796	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-11175	2026-06-9 14:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

797	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-11176	2026-06-9 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

798	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11177	2026-06-9 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

799	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-11178	2026-06-9 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

800	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-11179	2026-06-9 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255241	8.8	HIGH Network	tigervnc	tigervnc	In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.	CWE-415 Double Free	CVE-2017-7393	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255242	7.5	HIGH Network	tigervnc	tigervnc	In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-7392	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255243	6.1	MEDIUM Network	magmi_project	magmi	A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the 'magmi-git-master/magmi/web/ajax_ge…	CWE-79 Cross-site Scripting	CVE-2017-7391	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255244	6.1	MEDIUM Network	socialnetwork_project	socialnetwork	A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/tem…	CWE-79 Cross-site Scripting	CVE-2017-7390	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255245	6.1	MEDIUM Network	openeclass	openeclass	Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data (meeting_id, user) passed to the 'ope…	CWE-79 Cross-site Scripting	CVE-2017-7389	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255246	6.1	MEDIUM Network	wallaceit	wallacepos	A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data (token) passed to the 'wallacepos-master/myaccount/re…	CWE-79 Cross-site Scripting	CVE-2017-7388	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255247	6.1	MEDIUM Network	helpmewatchwho_project	helpmewatchwho	TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter).	CWE-79 Cross-site Scripting	CVE-2017-7387	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255248	6.1	MEDIUM Network	symetrie_project	symetrie	citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter).	CWE-79 Cross-site Scripting	CVE-2017-7386	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255249	7.8	HIGH Local	linux	linux_kernel	Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring…	CWE-476 CWE-416 NULL Pointer Dereference Use After Free	CVE-2017-7374	2024-11-21 12:31	2017-04-1	Show	GitHub Exploit DB Packet Storm

255250	6.1	MEDIUM Network	lucidcrew	pixie	Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.	CWE-79 Cross-site Scripting	CVE-2017-7363	2024-11-21 12:31	2017-03-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed