Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191821 9.8 緊急
Network 		Botan project - Randombit Botan における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-2801 2017-06-26 13:50 2017-04-28 Show GitHub Exploit DB Packet Storm
191822 8.8 重要
Network 		Pivotal Software, Inc. - Spring Framework における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2014-0225 2017-06-26 13:50 2014-05-28 Show GitHub Exploit DB Packet Storm
191823 7.3 重要
Network 		Pivotal Software, Inc. - Spring Security における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2014-0097 2017-06-26 13:50 2014-03-11 Show GitHub Exploit DB Packet Storm
191824 7.2 重要
Network 		e107.org - e107 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-10378 2017-06-26 12:15 2016-09-16 Show GitHub Exploit DB Packet Storm
191825 9.8 緊急
Network 		picocom project - picocom におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2015-9059 2017-06-26 12:15 2015-08-18 Show GitHub Exploit DB Packet Storm
191826 7.5 重要
Network 		systemd project - systemd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-9217 2017-06-26 11:53 2017-05-24 Show GitHub Exploit DB Packet Storm
191827 6.5 警告
Network 		Artifex Software - MuPDF および Ghostscript で使用される Artifex jbig2dec における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-9216 2017-06-26 11:53 2017-05-27 Show GitHub Exploit DB Packet Storm
191828 9.8 緊急
Network 		Open vSwitch - Open vSwitch における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2017-9214 2017-06-26 11:40 2017-05-20 Show GitHub Exploit DB Packet Storm
191829 5.5 警告
Local 		Kodi - Kodi の Zip Extraction built-in 関数におけるディレクトリトラバーサルの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-8314 2017-06-26 11:40 2017-04-28 Show GitHub Exploit DB Packet Storm
191830 7.8 重要
Local 		Huawei - 複数の Huawei P7 のソフトウェアの GPU ドライバにおける任意のカーネルメモリ領域に読み書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-8089 2017-06-26 11:40 2015-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
491 4.4 MEDIUM
Local 		google chrome Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via a crafted Chrome Extens… New CWE-20
 Improper Input Validation  		CVE-2026-7941 2026-05-7 08:33 2026-05-7 Show GitHub Exploit DB Packet Storm
492 4.3 MEDIUM
Network 		google chrome Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-7942 2026-05-7 08:33 2026-05-7 Show GitHub Exploit DB Packet Storm
493 4.2 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a cr… New CWE-20
 Improper Input Validation  		CVE-2026-7943 2026-05-7 08:32 2026-05-7 Show GitHub Exploit DB Packet Storm
494 3.1 LOW
Network 		google chrome Insufficient validation of untrusted input in Persistent Cache in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via … New CWE-20
 Improper Input Validation  		CVE-2026-7944 2026-05-7 08:32 2026-05-7 Show GitHub Exploit DB Packet Storm
495 3.1 LOW
Network 		google chrome Insufficient validation of untrusted input in COOP in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HT… New CWE-20
 Improper Input Validation  		CVE-2026-7945 2026-05-7 08:32 2026-05-7 Show GitHub Exploit DB Packet Storm
496 4.3 MEDIUM
Network 		google chrome Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site iso… New NVD-CWE-noinfo
CVE-2026-7946 2026-05-7 08:32 2026-05-7 Show GitHub Exploit DB Packet Storm
497 4.2 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted H… New CWE-20
 Improper Input Validation  		CVE-2026-7947 2026-05-7 08:32 2026-05-7 Show GitHub Exploit DB Packet Storm
498 8.8 HIGH
Network 		google chrome Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Med… New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-7973 2026-05-7 08:29 2026-05-7 Show GitHub Exploit DB Packet Storm
499 8.8 HIGH
Network 		google chrome Use after free in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) New CWE-416
 Use After Free 		CVE-2026-7974 2026-05-7 08:28 2026-05-7 Show GitHub Exploit DB Packet Storm
500 8.3 HIGH
Network 		google chrome Use after free in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. … New CWE-416
 Use After Free 		CVE-2026-7975 2026-05-7 08:27 2026-05-7 Show GitHub Exploit DB Packet Storm