Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208921 4 警告 Moodle - Moodle の calendar/externallib.php におけるカレンダーの重要なイベント情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-0215 2015-06-4 11:05 2015-01-19 Show GitHub Exploit DB Packet Storm
208922 4 警告 Moodle - Moodle の message/externallib.php におけるメッセージングの無効設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0214 2015-06-4 11:05 2015-01-19 Show GitHub Exploit DB Packet Storm
208923 6.8 警告 Moodle - Moodle の Glossary モジュールの editcategories.html および editcategories.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-0213 2015-06-4 11:05 2015-01-19 Show GitHub Exploit DB Packet Storm
208924 3.5 注意 Moodle - Moodle の course/pending.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0212 2015-06-4 11:04 2015-01-19 Show GitHub Exploit DB Packet Storm
208925 4 警告 Moodle - Moodle の mod/lti/ajax.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-0211 2015-06-4 11:04 2015-01-19 Show GitHub Exploit DB Packet Storm
208926 4.3 警告 Zenphoto - Zenphoto におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2948 2015-06-3 18:04 2015-05-28 Show GitHub Exploit DB Packet Storm
208927 4.3 警告 ZenPhoto20 - ZenPhoto20 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2949 2015-06-3 18:04 2015-05-28 Show GitHub Exploit DB Packet Storm
208928 6.8 警告 Synology Inc. - Synology の OS X 向け Cloud Station Client ユーティリティに一般ユーザによるシステムファイルの所有者変更が可能になる問題 CWE-264
CWE-Other
CVE-2015-2851 2015-06-3 18:04 2015-05-26 Show GitHub Exploit DB Packet Storm
208929 6.8 警告 IDS - IDS RTU 850C デバイス用 NC854 および NC856 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-3939 2015-06-3 16:58 2015-05-28 Show GitHub Exploit DB Packet Storm
208930 7.5 危険 IBM - IBM PowerVC における任意のデータベースのレコードを読み書きされる脆弱性 CWE-Other
その他
CVE-2015-1937 2015-06-3 16:55 2015-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1321 8.8 HIGH
Network
google chrome Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-7907 2026-05-7 08:41 2026-05-7 Show GitHub Exploit DB Packet Storm
1322 9.6 CRITICAL
Network
google chrome Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-7908 2026-05-7 08:41 2026-05-7 Show GitHub Exploit DB Packet Storm
1323 3.1 LOW
Network
google chrome Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML pa… CWE-693
 Protection Mechanism Failure
CVE-2026-7909 2026-05-7 08:41 2026-05-7 Show GitHub Exploit DB Packet Storm
1324 8.3 HIGH
Network
google chrome Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… CWE-416
 Use After Free
CVE-2026-7911 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
1325 4.2 MEDIUM
Network
google chrome Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. … CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-7912 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
1326 7.8 HIGH
Local
google chrome Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severi… CWE-693
 Protection Mechanism Failure
CVE-2026-7913 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
1327 8.3 HIGH
Network
google chrome Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra… CWE-843
Type Confusion
CVE-2026-7914 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
1328 8.3 HIGH
Network
google chrome Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… CWE-416
 Use After Free
CVE-2026-7917 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
1329 8.3 HIGH
Network
google chrome Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro… CWE-416
 Use After Free
CVE-2026-7918 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
1330 8.3 HIGH
Network
google chrome Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr… CWE-416
 Use After Free
CVE-2026-7919 2026-05-7 08:38 2026-05-7 Show GitHub Exploit DB Packet Storm