Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204111 7.5 重要
Network
Petri Lehtinen - Jansson におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4425 2016-05-23 13:58 2016-05-3 Show GitHub Exploit DB Packet Storm
204112 9.8 緊急
Network
VMware - Windows 上で稼動する VMware Workstation および Player におけるホスト OS の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2077 2016-05-23 13:43 2016-05-17 Show GitHub Exploit DB Packet Storm
204113 6.8 警告 Lantronix, Inc. - Lantronix xPrintServer におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9003 2016-05-23 12:16 2014-11-11 Show GitHub Exploit DB Packet Storm
204114 10 危険 Lantronix, Inc. - Lantronix xPrintServer における任意のコマンドを実行される脆弱性 CWE-264
CWE-Other
CVE-2014-9002 2016-05-23 12:15 2014-11-11 Show GitHub Exploit DB Packet Storm
204115 9.8 緊急
Network
Lantronix, Inc. - Lantronix xPrintServer デバイスのファームウェアにおける root アクセス権を取得される脆弱性 CWE-255
CWE-Other
CVE-2016-4325 2016-05-23 12:13 2016-05-13 Show GitHub Exploit DB Packet Storm
204116 7.5 重要
Network
Xstream
Debian
- XStream の複数のドライバにおける XML 外部エンティティの脆弱性 CWE-200
情報漏えい
CVE-2016-3674 2016-05-23 12:13 2016-03-15 Show GitHub Exploit DB Packet Storm
204117 4.3 警告
Network
IBM - IBM Cognos TM1 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-0381 2016-05-23 11:39 2016-05-12 Show GitHub Exploit DB Packet Storm
204118 7.5 重要
Network
IBM - IBM Multi-Enterprise Integration Gateway および B2B Advanced Communications における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0341 2016-05-23 11:39 2016-05-2 Show GitHub Exploit DB Packet Storm
204119 6.5 警告
Network
IBM - IBM Bluemix の Java 用 Liberty の Auto-Scaling エージェントにおける X.509 証明書の検証を無効にされる脆弱性 CWE-Other
その他
CVE-2016-0323 2016-05-23 11:39 2016-03-31 Show GitHub Exploit DB Packet Storm
204120 5.9 警告
Network
IBM - IBM WebSphere Application Server における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0306 2016-05-23 11:39 2016-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
391 9.1 CRITICAL
Network
apache ofbiz Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrad… New CWE-90
LDAP Injection
CVE-2026-41919 2026-05-20 01:35 2026-05-19 Show GitHub Exploit DB Packet Storm
392 6.5 MEDIUM
Network
apache ofbiz Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue. New CWE-285
Improper Authorization
CVE-2026-45187 2026-05-20 01:35 2026-05-19 Show GitHub Exploit DB Packet Storm
393 9.1 CRITICAL
Network
freedesktop gst-plugins-good An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before per… Update CWE-369
 Divide By Zero
CVE-2026-46470 2026-05-20 01:34 2026-05-15 Show GitHub Exploit DB Packet Storm
394 7.5 HIGH
Network
google chrome Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via… Update CWE-862
 Missing Authorization
CVE-2026-8547 2026-05-20 01:33 2026-05-15 Show GitHub Exploit DB Packet Storm
395 5.3 MEDIUM
Network
google chrome Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fr… Update CWE-125
Out-of-bounds Read
CVE-2026-8546 2026-05-20 01:33 2026-05-15 Show GitHub Exploit DB Packet Storm
396 5.3 MEDIUM
Network
google chrome Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive infor… Update CWE-125
Out-of-bounds Read
CVE-2026-8543 2026-05-20 01:33 2026-05-15 Show GitHub Exploit DB Packet Storm
397 8.3 HIGH
Network
google chrome Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTM… Update CWE-416
 Use After Free
CVE-2026-8542 2026-05-20 01:32 2026-05-15 Show GitHub Exploit DB Packet Storm
398 7.5 HIGH
Network
google chrome Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a … Update CWE-693
 Protection Mechanism Failure
CVE-2026-8585 2026-05-20 01:30 2026-05-15 Show GitHub Exploit DB Packet Storm
399 4.2 MEDIUM
Network
google chrome Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page… Update CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-8584 2026-05-20 01:29 2026-05-15 Show GitHub Exploit DB Packet Storm
400 8.3 HIGH
Network
google chrome Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted … Update CWE-416
 Use After Free
CVE-2026-8530 2026-05-20 01:27 2026-05-15 Show GitHub Exploit DB Packet Storm