Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4281 7.3 重要
Network 		Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2025-14362 2026-04-24 11:36 2026-04-21 Show GitHub Exploit DB Packet Storm
4282 8.1 重要
Network 		Gardyn Gardin API GardynのGardin APIにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-25197 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
4283 4.8 警告
Network 		LibreNMS LibreNMS LibreNMSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-2728 2026-04-24 11:36 2026-04-13 Show GitHub Exploit DB Packet Storm
4284 7.5 重要
Network 		Gardyn Gardin API GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-28766 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
4285 5.3 警告
Network 		Gardyn Gardin API GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-28767 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
4286 3.7 低
Network 		ERLANG Erlang/OTP ERLANGのErlang/OTPにおける予測可能な数字や識別子の生成に関する脆弱性 CWE-340
予測可能な数字や識別子の生成 		CVE-2026-28810 2026-04-24 11:36 2026-04-7 Show GitHub Exploit DB Packet Storm
4287 7.2 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-30804 2026-04-24 11:36 2026-04-13 Show GitHub Exploit DB Packet Storm
4288 8.8 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-30806 2026-04-24 11:36 2026-04-13 Show GitHub Exploit DB Packet Storm
4289 8.8 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-30809 2026-04-24 11:36 2026-04-13 Show GitHub Exploit DB Packet Storm
4290 6.5 警告
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2026-30811 2026-04-24 11:36 2026-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
691 7.5 HIGH
Network 		- - The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6. This is due to insufficient escaping on the user suppl… CWE-89
SQL Injection 		CVE-2026-8912 2026-05-19 23:38 2026-05-19 Show GitHub Exploit DB Packet Storm
692 6.3 MEDIUM
Network 		tencent weknora A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseForInitialization of the file internal/handler/initialization.go of the component… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-8786 2026-05-19 23:30 2026-05-18 Show GitHub Exploit DB Packet Storm
693 5.3 MEDIUM
Network 		google chrome Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium se… CWE-664
 Improper Control of a Resource Through its Lifetime 		CVE-2026-8582 2026-05-19 23:30 2026-05-15 Show GitHub Exploit DB Packet Storm
694 7.5 HIGH
Network 		vercel ai A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manip… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8767 2026-05-19 23:29 2026-05-18 Show GitHub Exploit DB Packet Storm
695 4.3 MEDIUM
Network 		google chrome Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity… CWE-122
Heap-based Buffer Overflow 		CVE-2026-8552 2026-05-19 23:27 2026-05-15 Show GitHub Exploit DB Packet Storm
696 3.1 LOW
Network 		google chrome Type Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted H… CWE-843
Type Confusion 		CVE-2026-8554 2026-05-19 23:27 2026-05-15 Show GitHub Exploit DB Packet Storm
697 4.3 MEDIUM
Network 		google chrome Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium securi… CWE-122
Heap-based Buffer Overflow 		CVE-2026-8560 2026-05-19 23:27 2026-05-15 Show GitHub Exploit DB Packet Storm
698 4.3 MEDIUM
Network 		google chrome Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium secu… CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-8559 2026-05-19 23:26 2026-05-15 Show GitHub Exploit DB Packet Storm
699 3.1 LOW
Network 		google chrome Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HT… CWE-119
CWE-284
Incorrect Access of Indexable Resource ('Range Error') 
Improper Access Control 		CVE-2026-8556 2026-05-19 23:26 2026-05-15 Show GitHub Exploit DB Packet Storm
700 8.8 HIGH
Network 		google chrome Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free 		CVE-2026-8555 2026-05-19 23:26 2026-05-15 Show GitHub Exploit DB Packet Storm