Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218731 5 警告 Powerpc-utils project - powerpc-utils の snap における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2014-4040 2014-06-19 15:56 2014-06-17 Show GitHub Exploit DB Packet Storm
218732 4.3 警告 Ulli Horlacher - Frams' Fast File EXchange におけるクロスサイトスクリプティングの脆弱性 CWE-Other
その他 		CVE-2014-3877 2014-06-19 13:54 2014-05-26 Show GitHub Exploit DB Packet Storm
218733 4.3 警告 Ulli Horlacher - Frams' Fast File EXchange におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3876 2014-06-19 13:54 2014-05-26 Show GitHub Exploit DB Packet Storm
218734 7.8 危険 Huawei - Huawei Campus シリーズスイッチのソフトウェアにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-4190 2014-06-19 12:01 2014-06-4 Show GitHub Exploit DB Packet Storm
218735 4.3 警告 ClipBucket - ClipBucket の signup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4187 2014-06-19 11:49 2014-06-14 Show GitHub Exploit DB Packet Storm
218736 5 警告 OpenAFS - OpenAFS におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-4044 2014-06-19 11:46 2014-06-12 Show GitHub Exploit DB Packet Storm
218737 4.3 警告 HAM3D - HAM3D Shop Engine の rating/rating.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4302 2014-06-19 11:40 2014-06-11 Show GitHub Exploit DB Packet Storm
218738 6 警告 OpenStack - OpenStack Identity における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3476 2014-06-19 11:33 2014-05-31 Show GitHub Exploit DB Packet Storm
218739 9.3 危険 シトリックス・システムズ - Citrix Access Gateway Enterprise Edition Plug-in for Windows におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2592 2014-06-19 11:23 2011-07-19 Show GitHub Exploit DB Packet Storm
218740 5 警告 Puppet - Puppet Enterprise における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-3249 2014-06-19 11:07 2014-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1261 8.3 HIGH
Network 		google chrome Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT… CWE-416
 Use After Free 		CVE-2026-8513 2026-05-20 02:24 2026-05-15 Show GitHub Exploit DB Packet Storm
1262 8.8 HIGH
Network 		google chrome Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a cra… CWE-664
 Improper Control of a Resource Through its Lifetime 		CVE-2026-8517 2026-05-20 02:24 2026-05-15 Show GitHub Exploit DB Packet Storm
1263 8.8 HIGH
Network 		google chrome Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: … CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-8519 2026-05-20 02:23 2026-05-15 Show GitHub Exploit DB Packet Storm
1264 4.3 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate that the RefreshedToken differs from the original invite token during remote cluster invite confirmation which allows an aut… CWE-863
 Incorrect Authorization 		CVE-2026-4273 2026-05-20 02:23 2026-05-18 Show GitHub Exploit DB Packet Storm
1265 8.8 HIGH
Network 		google chrome Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free 		CVE-2026-8522 2026-05-20 02:23 2026-05-15 Show GitHub Exploit DB Packet Storm
1266 8.3 HIGH
Network 		google chrome Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: H… CWE-122
Heap-based Buffer Overflow 		CVE-2026-8525 2026-05-20 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1267 7.5 HIGH
Network 		hsclabs mailinspector HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controll… CWE-73
 External Control of File Name or Path 		CVE-2026-29962 2026-05-20 02:21 2026-05-19 Show GitHub Exploit DB Packet Storm
1268 6.5 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to validate 7zip archive structure before processing which allows an authenticated attacker to cause server memory exh… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-6340 2026-05-20 02:21 2026-05-18 Show GitHub Exploit DB Packet Storm
1269 7.5 HIGH
Network 		hsclabs mailinspector HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct file paths without … CWE-22
Path Traversal 		CVE-2026-29963 2026-05-20 02:21 2026-05-19 Show GitHub Exploit DB Packet Storm
1270 6.1 MEDIUM
Network 		hsclabs mailinspector HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input using alternate or obfuscated JavaS… CWE-79
Cross-site Scripting 		CVE-2026-29964 2026-05-20 02:20 2026-05-19 Show GitHub Exploit DB Packet Storm