Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2161 10 緊急
Network 		dgraph dgraph dgraphにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-34976 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
2162 8.2 重要
Local 		Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-34982 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
2163 6.5 警告
Network 		external-secrets external secrets operator external-secretsのexternal secrets operatorにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34984 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2164 8.1 重要
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-73
CWE-918
CVE-2026-35032 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2165 9.1 緊急
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-862
CWE-88
CVE-2026-35033 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
2166 9 緊急
Network 		Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35035 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2167 7.2 重要
Network 		Ech0 Ech0 Ech0におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35037 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2168 9.1 緊急
Network 		nearform fast-jwt nearformのfast-jwtにおける複数の脆弱性 CWE-1289
CWE-345
CWE-706
CVE-2026-35039 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2169 5.3 警告
Network 		WWBN AVideo WWBNのAVideoにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-35179 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2170 8.8 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35196 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 8.3 HIGH
Network 		google chrome Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… New CWE-416
 Use After Free 		CVE-2026-7911 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
462 4.2 MEDIUM
Network 		google chrome Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. … New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-7912 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
463 7.8 HIGH
Local 		google chrome Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severi… New CWE-693
 Protection Mechanism Failure 		CVE-2026-7913 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
464 8.3 HIGH
Network 		google chrome Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra… New CWE-843
Type Confusion 		CVE-2026-7914 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
465 4.3 MEDIUM
Network 		google chrome Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security sev… New NVD-CWE-noinfo
CVE-2026-7915 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
466 8.3 HIGH
Network 		google chrome Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… New NVD-CWE-noinfo
CVE-2026-7916 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
467 8.3 HIGH
Network 		google chrome Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… New CWE-416
 Use After Free 		CVE-2026-7917 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
468 8.3 HIGH
Network 		google chrome Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro… New CWE-416
 Use After Free 		CVE-2026-7918 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
469 8.3 HIGH
Network 		google chrome Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr… New CWE-416
 Use After Free 		CVE-2026-7919 2026-05-7 08:38 2026-05-7 Show GitHub Exploit DB Packet Storm
470 8.3 HIGH
Network 		google chrome Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr… New CWE-416
 Use After Free 		CVE-2026-7920 2026-05-7 08:38 2026-05-7 Show GitHub Exploit DB Packet Storm