Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207521 7.5 危険 Google - Google Chrome の WebKit/Source/bindings/core/v8/WindowProxy.cpp における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-6769 2015-12-8 16:36 2015-12-1 Show GitHub Exploit DB Packet Storm
207522 7.5 危険 Google - Google Chrome の DOM の実装における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-6768 2015-12-8 16:36 2015-12-1 Show GitHub Exploit DB Packet Storm
207523 7.5 危険 Google - Google Chrome の AppCache の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-6767 2015-12-8 16:36 2015-12-1 Show GitHub Exploit DB Packet Storm
207524 7.5 危険 Google - Google Chrome の AppCache の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-6766 2015-12-8 16:36 2015-12-1 Show GitHub Exploit DB Packet Storm
207525 10 危険 Google - Google Chrome の content/browser/appcache/appcache_update_job.cc における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-6765 2015-12-8 16:36 2015-12-1 Show GitHub Exploit DB Packet Storm
207526 7.5 危険 Google - Google Chrome で使用される Google V8 の JSON stringifier におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-6764 2015-12-8 16:36 2015-12-1 Show GitHub Exploit DB Packet Storm
207527 4.3 警告 レッドハット - Ceph の Ceph Object Gateway における CRLF インジェクションの脆弱性 CWE-Other
その他 		CVE-2015-5245 2015-12-7 17:25 2015-11-23 Show GitHub Exploit DB Packet Storm
207528 7.5 危険 Novell
Carnegie Mellon University (Project Cyrus)		 - Cyrus IMAP の imap/index.c の index_urlfetch 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2015-8078 2015-12-7 17:05 2015-10-26 Show GitHub Exploit DB Packet Storm
207529 7.5 危険 Novell
Carnegie Mellon University (Project Cyrus)		 - Cyrus IMAP の imap/index.c の index_urlfetch 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2015-8077 2015-12-7 17:05 2015-10-26 Show GitHub Exploit DB Packet Storm
207530 7.5 危険 Novell
Carnegie Mellon University (Project Cyrus)		 - Cyrus IMAP の index.c の index_urlfetch 関数における重要な情報を取得される脆弱性 CWE-119
CWE-200
CVE-2015-8076 2015-12-7 17:05 2015-09-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2341 6.5 MEDIUM
Network 		- - Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized… CWE-787
 Out-of-bounds Write 		CVE-2026-8669 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2342 7.5 HIGH
Network 		- - Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. CWE-331
 Insufficient Entropy 		CVE-2026-46474 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2343 7.3 HIGH
Network 		- - Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. CWE-331
 Insufficient Entropy 		CVE-2026-8700 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2344 6.5 MEDIUM
Network 		- - Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. CWE-552
 Files or Directories Accessible to External Parties 		CVE-2026-8704 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2345 8.2 HIGH
Network 		- - Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources c… CWE-93
CRLF Injection 		CVE-2026-46720 2026-05-19 02:40 2026-05-18 Show GitHub Exploit DB Packet Storm
2346 9.8 CRITICAL
Network 		- - Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info(… CWE-787
 Out-of-bounds Write 		CVE-2026-8507 2026-05-19 02:40 2026-05-18 Show GitHub Exploit DB Packet Storm
2347 9.8 CRITICAL
Network 		- - Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to Sv… CWE-170
 Improper Null Termination 		CVE-2026-8721 2026-05-19 02:40 2026-05-18 Show GitHub Exploit DB Packet Storm
2348 7.8 HIGH
Local 		- - VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place ma… CWE-428
 Unquoted Search Path or Element 		CVE-2021-47974 2026-05-19 02:38 2026-05-17 Show GitHub Exploit DB Packet Storm
2349 8.4 HIGH
Local 		- - VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craf… CWE-120
Classic Buffer Overflow 		CVE-2018-25328 2026-05-19 02:38 2026-05-17 Show GitHub Exploit DB Packet Storm
2350 6.5 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), th… CWE-862
 Missing Authorization 		CVE-2026-44571 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm