Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251031	6.8	警告	Google	-	Google Chrome の browser native UI における詳細不明な脆弱性	CWE-Other その他	CVE-2011-3055	2012-03-27 14:05	2012-03-21	Show	GitHub Exploit DB Packet Storm

251032	5	警告	Google	-	Google Chrome の WebUI 権限の実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3054	2012-03-27 14:04	2012-03-21	Show	GitHub Exploit DB Packet Storm

251033	7.5	危険	Google	-	Google Chrome の WebGL 実装におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-119 バッファエラー	CVE-2011-3052	2012-03-27 13:58	2012-03-21	Show	GitHub Exploit DB Packet Storm

251034	7.5	危険	Google	-	Google Chrome の Cascading Style Sheets 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3051	2012-03-27 13:57	2012-03-21	Show	GitHub Exploit DB Packet Storm

251035	6.8	警告	Google	-	Google Chrome で使用される libpng の pngrutil.c における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3045	2012-03-27 13:53	2012-03-21	Show	GitHub Exploit DB Packet Storm

251036	6.4	警告	日本電気 IBM 富士通サイバートラスト株式会社 NTP Project サン・マイクロシステムズヒューレット・パッカードインターネットイニシアティブオラクルレッドハット	-	NTP におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2009-3563	2012-03-27 11:37	2009-12-9	Show	GitHub Exploit DB Packet Storm

251037	6.8	警告	アップルサイバートラスト株式会社 NTP Project ヒューレット・パッカードターボリナックスオラクル VMware レッドハット	-	NTP の ntpq における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0159	2012-03-27 11:35	2009-04-14	Show	GitHub Exploit DB Packet Storm

251038	5	警告	アップルサイバートラスト株式会社レッドハットオラクル NTP Project	-	NTP における証明書チェーンの有効性を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-0021	2012-03-27 11:01	2009-01-7	Show	GitHub Exploit DB Packet Storm

251039	5	警告	アップルサイバートラスト株式会社 PNG Development Group オラクル VMware レッドハット	-	libpng に含まれる pngrutil.c におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-2249	2012-03-27 10:32	2010-06-26	Show	GitHub Exploit DB Packet Storm

251040	7.5	危険	アップルサイバートラスト株式会社 Mozilla Foundation PNG Development Group オラクル VMware フェンリル株式会社レッドハット	-	libpng に脆弱性	CWE-119 バッファエラー	CVE-2010-1205	2012-03-27 10:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4071	4.2	MEDIUM Network	google	chrome	Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to spoof the contents of t…	CWE-20 Improper Input Validation	CVE-2026-7993	2026-05-7 08:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

4072	7.8	HIGH Local	google	chrome	Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium securit…	CWE-269 Improper Privilege Management	CVE-2026-7994	2026-05-7 08:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

4073	8.8	HIGH Network	google	chrome	Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Mediu…	CWE-125 Out-of-bounds Read	CVE-2026-7995	2026-05-7 08:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

4074	4.2	MEDIUM Network	google	chrome	Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML …	CWE-20 Improper Input Validation	CVE-2026-7996	2026-05-7 08:18	2026-05-7	Show	GitHub Exploit DB Packet Storm

4075	7.8	HIGH Local	google	chrome	Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium …	CWE-20 Improper Input Validation	CVE-2026-7997	2026-05-7 08:18	2026-05-7	Show	GitHub Exploit DB Packet Storm

4076	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2026-6278	2026-05-7 08:16	2026-05-7	Show	GitHub Exploit DB Packet Storm

4077	9.4	CRITICAL Network	-	-	Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt("null") placeholder whenever a user has no stored pas…	CWE-287 Improper Authentication	CVE-2026-41571	2026-05-7 06:25	2026-05-5	Show	GitHub Exploit DB Packet Storm

4078	-		-	-	FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser control…	CWE-472 External Control of Assumed-Immutable Web Parameter	CVE-2026-32699	2026-05-7 06:25	2026-05-6	Show	GitHub Exploit DB Packet Storm

4079	-		-	-	Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the cUsers.updateAddress function does not properly validate anti-CSRF tokens for user address management …	CWE-352 Origin Validation Error	CVE-2026-40174	2026-05-7 06:22	2026-05-7	Show	GitHub Exploit DB Packet Storm

4080	-		-	-	Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the cTrash.empty function does not validate anti-CSRF tokens for trash management requests. An attacker ca…	CWE-352 Origin Validation Error	CVE-2026-40309	2026-05-7 06:22	2026-05-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed