Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222371 6.8 警告 FFmpeg - FFmpeg の libavcodec/vp3.c の vp3_update_thread_context 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3934 2013-12-11 16:31 2012-01-26 Show GitHub Exploit DB Packet Storm
222372 4.3 警告 Now Wireless Limited - NowSMS Now SMS & MMS Gateway の MMSC におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7001 2013-12-11 15:59 2013-11-15 Show GitHub Exploit DB Packet Storm
222373 4.3 警告 Now Wireless Limited - NowSMS Now SMS & MMS Gateway の MMSC におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7000 2013-12-11 15:55 2013-11-15 Show GitHub Exploit DB Packet Storm
222374 9.3 危険 FFmpeg - FFmpeg の libavcodec/tiff.c の add_doubles_metadata 関数における脆弱性 CWE-189
数値処理の問題 		CVE-2013-0859 2013-12-11 11:36 2013-12-7 Show GitHub Exploit DB Packet Storm
222375 9.3 危険 FFmpeg - FFmpeg の libavcodec/atrac3.c の atrac3_decode_init 関数における脆弱性 CWE-16
環境設定 		CVE-2013-0858 2013-12-11 11:24 2013-02-7 Show GitHub Exploit DB Packet Storm
222376 9.3 危険 FFmpeg - FFmpeg の libavcodec/iff.c の decode_frame_ilbm 関数における脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0857 2013-12-11 11:18 2013-07-16 Show GitHub Exploit DB Packet Storm
222377 9.3 危険 FFmpeg - FFmpeg の libavcodec/alac.c の lpc_prediction 関数における脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0856 2013-12-11 11:14 2013-07-16 Show GitHub Exploit DB Packet Storm
222378 9.3 危険 FFmpeg - FFmpeg の libavcodec/alac.c の alac_decode_close 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-0855 2013-12-11 11:10 2013-07-16 Show GitHub Exploit DB Packet Storm
222379 9.3 危険 FFmpeg - FFmpeg の libavcodec/mjpegdec.c の mjpeg_decode_scan_progressive_ac 関数における脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0854 2013-12-11 11:01 2013-07-16 Show GitHub Exploit DB Packet Storm
222380 9.3 危険 FFmpeg - FFmpeg の libavcodec/roqvideodec.c の roq_decode_init 関数における脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0849 2013-12-11 10:50 2013-07-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
911 9.1 CRITICAL
Network 		- - OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Core evaluates databas… CWE-94
Code Injection 		CVE-2026-41258 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
912 - - - LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL back… CWE-327
CWE-347
 Use of a Broken or Risky Cryptographic Algorithm
 Improper Verification of Cryptographic Signature 		CVE-2026-44699 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
913 7.5 HIGH
Network 		- - The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-44714 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
914 9.8 CRITICAL
Network 		- - MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitiz… CWE-94
Code Injection 		CVE-2026-44717 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
915 5.5 MEDIUM
Local 		- - Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-46383 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
916 8.8 HIGH
Network 		google chrome Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hig… CWE-787
 Out-of-bounds Write 		CVE-2026-8524 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm
917 8.8 HIGH
Network 		google chrome Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write 		CVE-2026-8526 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm
918 8.8 HIGH
Network 		google chrome Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severi… CWE-20
 Improper Input Validation  		CVE-2026-8527 2026-05-19 04:42 2026-05-15 Show GitHub Exploit DB Packet Storm
919 4.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a … CWE-20
 Improper Input Validation  		CVE-2026-8528 2026-05-19 04:42 2026-05-15 Show GitHub Exploit DB Packet Storm
920 6.2 MEDIUM
Local 		- - Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can … CWE-120
Classic Buffer Overflow 		CVE-2020-37234 2026-05-19 04:42 2026-05-17 Show GitHub Exploit DB Packet Storm