Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227481 5 警告 Google - Google Chrome の IPC の実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2891 2012-12-26 18:04 2012-09-25 Show GitHub Exploit DB Packet Storm
227482 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2888 2012-12-26 18:02 2012-09-25 Show GitHub Exploit DB Packet Storm
227483 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2887 2012-12-26 18:01 2012-09-25 Show GitHub Exploit DB Packet Storm
227484 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2886 2012-12-26 18:00 2012-09-25 Show GitHub Exploit DB Packet Storm
227485 2.6 注意 VMware
Python Software Foundation		 - Python SimpleHTTPServer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4940 2012-12-26 18:00 2012-06-19 Show GitHub Exploit DB Packet Storm
227486 7.5 危険 Google - Google Chrome におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2885 2012-12-26 17:59 2012-09-25 Show GitHub Exploit DB Packet Storm
227487 5 警告 Google - Google Chrome で使用される Skia におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2884 2012-12-26 17:58 2012-09-25 Show GitHub Exploit DB Packet Storm
227488 4.6 警告 GNU Project
VMware		 - GNU C Library の stdlib における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-3480 2012-12-26 17:57 2012-08-25 Show GitHub Exploit DB Packet Storm
227489 3.3 注意 GNU Project
VMware		 - GNU C Library の addmntent 関数における /etc/mtab ファイルの破損を誘発される脆弱性 CWE-16
環境設定 		CVE-2011-1089 2012-12-26 17:55 2011-04-10 Show GitHub Exploit DB Packet Storm
227490 4.4 警告 Fabrice Bellard - Qemu の bdrv_open 関数における任意のファイルを上書きされる脆弱性 CWE-DesignError
CVE-2012-2652 2012-12-26 17:48 2012-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4061 6.5 MEDIUM
Network 		strapi strapi Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did not invalidate the user's existing refresh-token sessions … CWE-613
 Insufficient Session Expiration 		CVE-2026-22706 2026-05-16 12:23 2026-05-15 Show GitHub Exploit DB Packet Storm
4062 5.4 MEDIUM
Network 		strapi strapi Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restr… CWE-434
CWE-693
 Unrestricted Upload of File with Dangerous Type 
 Protection Mechanism Failure 		CVE-2026-22707 2026-05-16 12:22 2026-05-15 Show GitHub Exploit DB Packet Storm
4063 7.5 HIGH
Network 		strapi strapi Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational… CWE-22
CWE-200
CWE-943
Path Traversal
Information Exposure
 Improper Neutralization of Special Elements in Data Query Logic 		CVE-2026-27886 2026-05-16 12:16 2026-05-15 Show GitHub Exploit DB Packet Storm
4064 8.8 HIGH
Adjacent 		zyxel wre6505_firmware ** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operat… CWE-78
OS Command  		CVE-2026-7256 2026-05-16 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
4065 4.4 MEDIUM
Local 		zyxel wre6505_firmware ** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker … CWE-922
 Insecure Storage of Sensitive Information 		CVE-2026-7257 2026-05-16 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
4066 7.5 HIGH
Network 		zyxel nwa1100-n_firmware ** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of the “webs” binary in Zyxel NWA1100… CWE-120
Classic Buffer Overflow 		CVE-2026-7287 2026-05-16 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
4067 6.5 MEDIUM
Adjacent 		pengutronix barebox barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() function that fails to verify the options pointer remains within … CWE-125
Out-of-bounds Read 		CVE-2026-34960 2026-05-16 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
4068 9.8 CRITICAL
Network 		openclaw openclaw A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookRequest of the file extensions/bluebubbles/src/monitor.ts of the component blueb… CWE-287
Improper Authentication 		CVE-2026-8305 2026-05-16 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
4069 9.8 CRITICAL
Network 		libexpat_project libexpat `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this… CWE-331
 Insufficient Entropy 		CVE-2026-7210 2026-05-16 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
4070 8.1 HIGH
Network 		bitwarden server Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, allowing an authenticated user with SCIM management … CWE-303
 Incorrect Implementation of Authentication Algorithm 		CVE-2026-43640 2026-05-16 12:04 2026-05-12 Show GitHub Exploit DB Packet Storm