Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225691	5	警告	Google	-	Google Chrome で使用される Skia におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0883	2013-04-22 12:25	2013-02-21	Show	GitHub Exploit DB Packet Storm

225692	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-0882	2013-04-22 12:18	2013-02-21	Show	GitHub Exploit DB Packet Storm

225693	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0881	2013-04-22 12:15	2013-02-21	Show	GitHub Exploit DB Packet Storm

225694	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0880	2013-04-22 12:10	2013-02-21	Show	GitHub Exploit DB Packet Storm

225695	5	警告	Apache Software Foundation オラクル	-	APR ライブラリの Solaris pollset 機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2699	2013-04-19 15:09	2009-10-13	Show	GitHub Exploit DB Packet Storm

225696	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache HTTP Server の mod_proxy におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1890	2013-04-19 15:08	2009-07-5	Show	GitHub Exploit DB Packet Storm

225697	6.4	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache APR-util の apr_brigade_vprintf 関数における重要な情報を取得される脆弱性	CWE-189 数値処理の問題	CVE-2009-1956	2013-04-19 15:07	2009-06-8	Show	GitHub Exploit DB Packet Storm

225698	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache APR-util の XML パーサにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1955	2013-04-19 15:06	2009-06-8	Show	GitHub Exploit DB Packet Storm

225699	5	警告	アップル Apache Software Foundation オラクル	-	Apache HTTP Server の mod_proxy_ajp モジュールにおける情報漏えいの脆弱性	CWE-20 不適切な入力確認	CVE-2009-1191	2013-04-19 15:05	2009-04-23	Show	GitHub Exploit DB Packet Storm

225700	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache APR-util の apr_strmatch_precompile 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0023	2013-04-19 15:04	2009-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2141	-		-	-	Kargo manages and automates the promotion of software artifacts. Prior to versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2, Kargo is vulnerable to open redirect in UI OIDC login flow via the redirectTo que…	CWE-601 Open Redirect	CVE-2026-42350	2026-05-14 01:49	2026-05-9	Show	GitHub Exploit DB Packet Storm

2142	6.3	MEDIUM Local	-	-	Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting (XSS) vulnerability in Grimmory's browser-based EPUB reader allows an attacker to embed arbitrary Java…	CWE-79 CWE-80 Cross-site Scripting Basic XSS	CVE-2026-42451	2026-05-14 01:49	2026-05-9	Show	GitHub Exploit DB Packet Storm

2143	3.8	LOW Network	-	-	SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If th…	CWE-269 Improper Privilege Management	CVE-2026-44987	2026-05-14 01:49	2026-05-9	Show	GitHub Exploit DB Packet Storm

2144	-		-	-	bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap an…	CWE-269 Improper Privilege Management	CVE-2026-41163	2026-05-14 01:49	2026-05-9	Show	GitHub Exploit DB Packet Storm

2145	7.8	HIGH Local	-	-	pyp2spec generates working Fedora RPM spec file for Python projects. Prior to version 0.14.1, pyp2spec was writing PyPI package metadata (e.g. the summary field) into the generated spec file without …	CWE-20 CWE-94 Improper Input Validation Code Injection	CVE-2026-42301	2026-05-14 01:49	2026-05-9	Show	GitHub Exploit DB Packet Storm

2146	6.4	MEDIUM Network	-	-	Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a <script> or <style…	CWE-79 Cross-site Scripting	CVE-2026-41591	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

2147	-		-	-	pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, t…	CWE-89 SQL Injection	CVE-2026-41889	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

2148	-		-	-	Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arrow_tensor_v2, ray.data.arrow_variable_sh…	CWE-94 CWE-502 Code Injection Deserialization of Untrusted Data	CVE-2026-41486	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

2149	8.1	HIGH Network	-	-	OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Execution (RCE). This affects applica…	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-41883	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

2150	7.5	HIGH Network	-	-	locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener("message", …) handler that dispatches to regist…	CWE-79 CWE-346 Cross-site Scripting Origin Validation Error	CVE-2026-41886	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed