Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1251	9.8	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-25207	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

1252	9.8	緊急 Network	サムスン	escargot	サムスンのescargotにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-25208	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

1253	9.1	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-25209	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

1254	7.8	重要 Local	デル	Alienware Command Center	デルのAlienware Command Centerにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-25908	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

1255	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26942	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

1256	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26943	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

1257	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-26951	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

1258	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-27172	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

1259	7.8	重要 Local	ggml.ai	llama.cpp	ggml.aiのllama.cppにおける複数の脆弱性	CWE-122 CWE-190	CVE-2026-27940	2026-04-30 12:16	2026-03-12	Show	GitHub Exploit DB Packet Storm

1260	9.8	緊急 Network	OpenPLC Project	OpenPLC_v3 ファームウェア	OpenPLC ProjectのOpenPLC_v3 ファームウェアにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性	CWE-1188 リソースの安全ではないデフォルト値への初期化	CVE-2026-28205	2026-04-30 12:16	2026-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
991	4.3	MEDIUM Network	google	chrome	Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium… New	CWE-200 Information Exposure	CVE-2026-7999	2026-05-7 22:39	2026-05-7	Show	GitHub Exploit DB Packet Storm

992	8.8	HIGH Network	google	chrome	Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium se… New	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-8000	2026-05-7 22:39	2026-05-7	Show	GitHub Exploit DB Packet Storm

993	7.7	HIGH Network	openclaw	openclaw	OpenClaw before 2026.4.14 contains a server-side request forgery vulnerability in browser SSRF policy that allows private-network navigation by default. Attackers can exploit this misconfiguration to… Update	CWE-918 CWE-1188 Server-Side Request Forgery (SSRF) Insecure Default Initialization of Resource	CVE-2026-43527	2026-05-7 22:29	2026-05-5	Show	GitHub Exploit DB Packet Storm

994	6.1	MEDIUM Network	apache	wicket	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9.0.0, from 10.0.0 t… New	CWE-79 Cross-site Scripting	CVE-2026-42509	2026-05-7 22:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

995	9.1	CRITICAL Network	apache	wicket	Missing invocation of Servlet http web request method changeSessionId after session binding can be exploited for a session fixation attack in Apache Wicket. This issue affects Apache Wicket: from 8.… New	CWE-384 Session Fixation	CVE-2026-40010	2026-05-7 22:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

996	-		-	-	Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies the server field from NAMED_PIPE_OPEN_REQ into a fix… New	CWE-121 CWE-170 Stack-based Buffer Overflow Improper Null Termination	CVE-2026-34464	2026-05-7 22:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

997	-		-	-	Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, several ProcessServer handlers (KillAllHandler, SuspendAllHandler, and RunSandboxedHandl… New	CWE-121 CWE-170 Stack-based Buffer Overflow Improper Null Termination	CVE-2026-34462	2026-05-7 22:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

998	-		-	-	Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGID_SBIE_I… New	CWE-121 Stack-based Buffer Overflow	CVE-2026-34461	2026-05-7 22:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

999	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code wher… Update	CWE-908 Use of Uninitialized Resource	CVE-2026-31693	2026-05-7 21:49	2026-04-30	Show	GitHub Exploit DB Packet Storm

1000	6.7	MEDIUM Local	mediatek	mt6768_firmware mt6789_firmware mt6877_firmware mt6899_firmware mt6989_firmware mt6991_firmware mt6993_firmware mt8196_firmware mt8367_firmware mt8766_firmware mt8768_fi…	In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privileg… Update	CWE-125 Out-of-bounds Read	CVE-2026-20447	2026-05-7 21:43	2026-05-4	Show	GitHub Exploit DB Packet Storm