Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224871 6.8 警告 Google - Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0918 2013-03-29 16:01 2013-03-26 Show GitHub Exploit DB Packet Storm
224872 5 警告 Google - Google Chrome の URL ローダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0917 2013-03-29 16:00 2013-03-26 Show GitHub Exploit DB Packet Storm
224873 7.5 危険 Google - Google Chrome の Web Audio の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0916 2013-03-29 15:59 2013-03-26 Show GitHub Exploit DB Packet Storm
224874 2.6 注意 オムロン株式会社 - Android 版 OpenWnn におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2301 2013-03-29 12:02 2013-03-29 Show GitHub Exploit DB Packet Storm
224875 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-1454 2013-03-29 09:27 2013-02-4 Show GitHub Exploit DB Packet Storm
224876 9.3 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0634 2013-03-28 19:30 2013-02-7 Show GitHub Exploit DB Packet Storm
224877 9.3 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0633 2013-03-28 19:30 2013-02-7 Show GitHub Exploit DB Packet Storm
224878 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-0784 2013-03-28 19:28 2013-02-19 Show GitHub Exploit DB Packet Storm
224879 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0781 2013-03-28 19:25 2013-02-19 Show GitHub Exploit DB Packet Storm
224880 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0779 2013-03-28 19:23 2013-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
811 5.4 MEDIUM
Network 		- - Quark Drive before 0.8.5 contains a stored cross-site scripting vulnerability in the System Configuration page where the template renders push_config key names using Vue.js's v-html directive without… New CWE-79
Cross-site Scripting 		CVE-2026-45228 2026-05-15 01:24 2026-05-14 Show GitHub Exploit DB Packet Storm
812 8.8 HIGH
Network 		- - Quark Drive before 0.8.5 contains a mass assignment vulnerability in the POST /update endpoint that allows authenticated attackers to overwrite administrator credentials by posting an arbitrary webui… New CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-45229 2026-05-15 01:24 2026-05-14 Show GitHub Exploit DB Packet Storm
813 6.1 MEDIUM
Network 		- - Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flow where the Signup::addUser() controller copies raw POST username values into the display_name fiel… New CWE-79
Cross-site Scripting 		CVE-2026-41932 2026-05-15 01:24 2026-05-15 Show GitHub Exploit DB Packet Storm
814 5.3 MEDIUM
Network 		- - Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multiple paths lacking pro… New CWE-548
 Exposure of Information Through Directory Listing 		CVE-2026-41933 2026-05-15 01:24 2026-05-15 Show GitHub Exploit DB Packet Storm
815 7.1 HIGH
Network 		- - Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() on error handlers, causing infinite rec… New CWE-209
CWE-674
Information Exposure Through an Error Message
 Uncontrolled Recursion 		CVE-2026-41935 2026-05-15 01:24 2026-05-15 Show GitHub Exploit DB Packet Storm
816 7.2 HIGH
Network 		- - Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP code by uploading a malicious plugin ZIP f… New CWE-61
CWE-434
 UNIX Symbolic Link (Symlink) Following
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-41937 2026-05-15 01:24 2026-05-15 Show GitHub Exploit DB Packet Storm
817 - - - A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies. New CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-0235 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
818 - - - A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverag… New CWE-94
Code Injection 		CVE-2026-0236 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
819 - - - A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields. New CWE-20
 Improper Input Validation  		CVE-2026-0238 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
820 - - - An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information. New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-0239 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm