Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206531 7.5 危険 VMware - 複数の VMware 製品のシリアル化されたオブジェクトのインターフェースにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-6934 2015-12-24 12:24 2015-12-18 Show GitHub Exploit DB Packet Storm
206532 5 警告 日立 - Hitachi Command Suite 製品における任意のファイルを参照される脆弱性 CWE-noinfo
情報不足 		- 2015-12-22 17:35 2015-11-30 Show GitHub Exploit DB Packet Storm
206533 5 警告 OpenSSL Project
サイバートラスト株式会社
FreeBSD
サイボウズ
ヒューレット・パッカード		 - OpenSSL の heartbeat 拡張に情報漏えいの脆弱性 CWE-119
バッファエラー 		CVE-2014-0160 2015-12-22 15:48 2014-04-7 Show GitHub Exploit DB Packet Storm
206534 7.5 危険 dhcpcd project - dhcpcd の socket.c の get_packet メソッドにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2152 2015-12-22 15:48 2012-07-25 Show GitHub Exploit DB Packet Storm
206535 4.3 警告 Wireshark - Wireshark の pcapng パーサの wiretap/pcapng.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-7830 2015-12-22 15:32 2015-08-20 Show GitHub Exploit DB Packet Storm
206536 6.8 警告 GNOME Project - Linux 上で稼働する Mozilla Firefox および Google Chrome などの製品で使用される gdk-pixbuf における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2015-4491 2015-12-22 15:32 2015-07-13 Show GitHub Exploit DB Packet Storm
206537 4.3 警告 dcraw project - 複数の製品で使用される dcraw におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-1438 2015-12-22 15:32 2013-09-1 Show GitHub Exploit DB Packet Storm
206538 10 危険 LOYTEC electronics GmbH - 複数の LOYTEC デバイスにおけるパスワードハッシュのバックアップファイルを読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2015-7906 2015-12-22 15:10 2015-12-8 Show GitHub Exploit DB Packet Storm
206539 5 警告 ジュニパーネットワークス - Juniper ScreenOS の暗号化の実装における VPN セッションの平文コンテンツを取得される脆弱性 CWE-310
暗号の問題 		CVE-2015-7756 2015-12-22 14:38 2015-12-17 Show GitHub Exploit DB Packet Storm
206540 10 危険 ジュニパーネットワークス - Juniper ScreenOS における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2015-7755 2015-12-22 14:38 2015-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
841 7.3 HIGH
Network 		- - A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The affected element is the function _get_all_models of the file hiyoriUI.py of the component Model Handl… Update CWE-22
Path Traversal 		CVE-2026-8755 2026-05-19 04:31 2026-05-17 Show GitHub Exploit DB Packet Storm
842 7.3 HIGH
Network 		- - A vulnerability has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The impacted element is the function generate_config of the file webui_preprocess.py of the comp… Update CWE-22
Path Traversal 		CVE-2026-8756 2026-05-19 04:31 2026-05-17 Show GitHub Exploit DB Packet Storm
843 9.8 CRITICAL
Network 		- - A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-8836 2026-05-19 04:26 2026-05-19 Show GitHub Exploit DB Packet Storm
844 7.3 HIGH
Network 		- - A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFuncti… Update CWE-20
CWE-917
 Improper Input Validation 
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2026-8759 2026-05-19 04:22 2026-05-18 Show GitHub Exploit DB Packet Storm
845 5.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentia… Update CWE-20
 Improper Input Validation  		CVE-2026-8516 2026-05-19 04:17 2026-05-15 Show GitHub Exploit DB Packet Storm
846 8.8 HIGH
Network 		google chrome Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical) Update CWE-416
 Use After Free 		CVE-2026-8518 2026-05-19 04:17 2026-05-15 Show GitHub Exploit DB Packet Storm
847 8.3 HIGH
Network 		google chrome Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) Update CWE-362
Race Condition 		CVE-2026-8520 2026-05-19 04:17 2026-05-15 Show GitHub Exploit DB Packet Storm
848 7.5 HIGH
Adjacent 		google chrome Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical) Update CWE-416
 Use After Free 		CVE-2026-8521 2026-05-19 04:16 2026-05-15 Show GitHub Exploit DB Packet Storm
849 8.3 HIGH
Network 		google chrome Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch… Update CWE-416
 Use After Free 		CVE-2026-8523 2026-05-19 04:14 2026-05-15 Show GitHub Exploit DB Packet Storm
850 10.0 CRITICAL
Network 		dhtmlx pdf_export_module PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can inject the malicio… Update CWE-78
OS Command  		CVE-2026-41553 2026-05-19 03:40 2026-05-15 Show GitHub Exploit DB Packet Storm