Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218891 4.3 警告 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0531 2014-06-12 15:59 2014-06-10 Show GitHub Exploit DB Packet Storm
218892 7.5 危険 Google - Google Chrome の media/filters/ffmpeg_video_decoder.cc におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-3157 2014-06-12 15:42 2014-06-10 Show GitHub Exploit DB Packet Storm
218893 7.5 危険 Google - Google Chrome の clipboard の実装におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-3156 2014-06-12 15:40 2014-06-10 Show GitHub Exploit DB Packet Storm
218894 5 警告 Google - Google Chrome の SPDY の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-3155 2014-06-12 15:39 2014-06-10 Show GitHub Exploit DB Packet Storm
218895 7.5 危険 Google - Google Chrome のファイルシステム API におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-3154 2014-06-12 15:39 2014-06-10 Show GitHub Exploit DB Packet Storm
218896 7.5 危険 Vinay Sajip - python-gnupg における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-7323 2014-06-12 11:55 2013-08-30 Show GitHub Exploit DB Packet Storm
218897 5 警告 Mambo Foundation - Mambo CMS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2564 2014-06-12 11:24 2013-03-19 Show GitHub Exploit DB Packet Storm
218898 2.1 注意 Mambo Foundation - Mambo CMS における管理者パスワードのハッシュを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2563 2014-06-12 11:24 2013-03-19 Show GitHub Exploit DB Packet Storm
218899 2.1 注意 Mambo Foundation - Mambo CMS における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2562 2014-06-12 11:23 2013-03-19 Show GitHub Exploit DB Packet Storm
218900 2.1 注意 LiveZilla - LiveZilla におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-6223 2014-06-11 18:33 2013-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1461 - - - An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution. CWE-252
 Unchecked Return Value 		CVE-2025-29938 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1462 - - - A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash CWE-120
Classic Buffer Overflow 		CVE-2025-29944 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1463 - - - Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality or availability. CWE-908
 Use of Uninitialized Resource 		CVE-2025-48513 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1464 - - - Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent… CWE-276
Incorrect Default Permissions  		CVE-2025-48516 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1465 - - - Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write dat… CWE-274
 Improper Handling of Insufficient Privileges 		CVE-2025-54511 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1466 - - - Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. CWE-787
 Out-of-bounds Write 		CVE-2025-54517 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1467 - - - Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2025-66660 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1468 - - - Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read,… CWE-125
Out-of-bounds Read 		CVE-2025-66664 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1469 - - - Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potent… CWE-459
 Incomplete Cleanup 		CVE-2026-0427 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1470 - - - Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulti… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-0428 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm