Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2481 6.5 警告
Network
Chainlit Chainlit Chainlitにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-22218 2026-02-4 18:39 2026-01-20 Show GitHub Exploit DB Packet Storm
2482 7.7 重要
Network
Chainlit Chainlit Chainlitにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-22219 2026-02-4 18:39 2026-01-20 Show GitHub Exploit DB Packet Storm
2483 6.1 警告
Local
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける複数の脆弱性 CWE-476
CWE-787
CVE-2025-11187 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2484 9.8 緊急
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-15467 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2485 5.9 警告
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2025-15468 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2486 5.5 警告
Local
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2025-15469 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2487 5.9 警告
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て
CVE-2025-66199 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2488 4.7 警告
Local
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-68160 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2489 4 警告
Local
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける暗号化処理の不備に関する脆弱性 CWE-325
暗号化処理の不備
CVE-2025-69418 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2490 7.4 重要
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-69419 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 3.1 LOW
Network
google chrome Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium se… New CWE-362
Race Condition
CVE-2026-7351 2026-05-1 01:40 2026-04-29 Show GitHub Exploit DB Packet Storm
62 8.3 HIGH
Network
google chrome Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT… New CWE-416
 Use After Free
CVE-2026-7352 2026-05-1 01:40 2026-04-29 Show GitHub Exploit DB Packet Storm
63 8.3 HIGH
Network
google chrome Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag… New CWE-122
Heap-based Buffer Overflow
CVE-2026-7353 2026-05-1 01:39 2026-04-29 Show GitHub Exploit DB Packet Storm
64 7.2 HIGH
Local
palletsprojects click Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account. New CWE-77
Command Injection
CVE-2026-7246 2026-05-1 01:39 2026-04-30 Show GitHub Exploit DB Packet Storm
65 8.8 HIGH
Network
google chrome Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: … New CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-7354 2026-05-1 01:38 2026-04-29 Show GitHub Exploit DB Packet Storm
66 8.8 HIGH
Network
google chrome Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) New CWE-416
 Use After Free
CVE-2026-7355 2026-05-1 01:38 2026-04-29 Show GitHub Exploit DB Packet Storm
67 8.8 HIGH
Network
google chrome Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) New CWE-416
 Use After Free
CVE-2026-7356 2026-05-1 01:38 2026-04-29 Show GitHub Exploit DB Packet Storm
68 7.5 HIGH
Network
google chrome Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chro… New CWE-416
 Use After Free
CVE-2026-7357 2026-05-1 01:37 2026-04-29 Show GitHub Exploit DB Packet Storm
69 8.8 HIGH
Network
google chrome Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New CWE-416
 Use After Free
CVE-2026-7358 2026-05-1 01:37 2026-04-29 Show GitHub Exploit DB Packet Storm
70 8.8 HIGH
Network
google chrome Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (C… New CWE-416
 Use After Free
CVE-2026-7359 2026-05-1 01:37 2026-04-29 Show GitHub Exploit DB Packet Storm