Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
891 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-12452 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
892 4.2 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-12453 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
893 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-12454 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
894 7.5 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-12455 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
895 4.2 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-12456 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
896 4.2 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-12457 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
897 3.1 低
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-12458 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
898 6.1 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-12459 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
899 4.2 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-12460 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
900 6.5 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-12461 2026-06-22 11:42 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254131 7.8 HIGH
Local 		artifex
canonical
debian
redhat 		ghostscript
ubuntu_linux
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_server_aus
ent… 		The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-10194 2024-11-21 12:40 2018-04-19 Show GitHub Exploit DB Packet Storm
254132 5.3 MEDIUM
Network 		iac fromdoctopdf The FromDocToPDF extension before 13.611.13.2303 for Chrome allows remote attackers to discover visited web sites via vectors involving a mostVisitedSites command. CWE-200
Information Exposure 		CVE-2018-10178 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254133 6.5 MEDIUM
Network 		imagemagick
canonical 		imagemagick
ubuntu_linux 		In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a craf… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2018-10177 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254134 8.8 HIGH
Local 		7-zip 7-zip 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it … CWE-269
 Improper Privilege Management 		CVE-2018-10172 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254135 7.5 HIGH
Network 		mikrotik router_firmware A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins wi… CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-10070 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254136 6.1 MEDIUM
Network 		catalooksupport .netstore The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter. CWE-79
Cross-site Scripting 		CVE-2018-10138 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254137 8.8 HIGH
Network 		iscripts uberforx iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI. CWE-352
 Origin Validation Error 		CVE-2018-10137 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254138 6.1 MEDIUM
Network 		iscripts uberforx iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI. CWE-79
Cross-site Scripting 		CVE-2018-10136 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254139 6.1 MEDIUM
Network 		iscripts eswap iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel. CWE-79
Cross-site Scripting 		CVE-2018-10135 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254140 9.8 CRITICAL
Network 		pbootcms pbootcms PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \apps\home\controller\ParserController.php. CWE-94
Code Injection 		CVE-2018-10133 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm