Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231701 4 警告 VMware - VMWare VirtualCenter クライアントにおける有効なサーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2006-5990 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
231702 6.8 警告 webhost automation - Helm Web Hosting Control Panel におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5984 2012-12-20 18:02 2006-11-20 Show GitHub Exploit DB Packet Storm
231703 10 危険 renasoft - Renasoft NetJetServer の adm_lgn_admin.asp における管理者権限を取得される脆弱性 - CVE-2006-5980 2012-12-20 18:02 2006-11-20 Show GitHub Exploit DB Packet Storm
231704 5 警告 renasoft - Renasoft NetJetServer における重要な情報を取得される脆弱性 - CVE-2006-5979 2012-12-20 18:02 2006-11-20 Show GitHub Exploit DB Packet Storm
231705 5 警告 Timo Sirainen - Dovecot におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5973 2012-12-20 18:02 2006-11-19 Show GitHub Exploit DB Packet Storm
231706 5 警告 verity - Verity Ultraseek の admin/logfile.txt における絶対パストラバーサルの脆弱性 - CVE-2006-5971 2012-12-20 18:02 2006-11-17 Show GitHub Exploit DB Packet Storm
231707 5 警告 verity - Verity Ultraseek における重要な情報を取得される脆弱性 - CVE-2006-5970 2012-12-20 18:02 2006-11-17 Show GitHub Exploit DB Packet Storm
231708 6.8 警告 web inhabit - A+ Store E-Commerce の account_login.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5960 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
231709 7.5 危険 web inhabit - A+ Store E-Commerce の browse.asp における SQL インジェクションの脆弱性 - CVE-2006-5959 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
231710 2.1 注意 xlinesoft - XLineSoft PHPRunner における重要な情報を取得される脆弱性 - CVE-2006-5956 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 5.4 MEDIUM
Network 		microsoft edge_chromium Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. New CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-45492 2026-05-20 00:03 2026-05-19 Show GitHub Exploit DB Packet Storm
212 8.8 HIGH
Network 		google chrome Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New CWE-416
 Use After Free 		CVE-2026-8544 2026-05-19 23:53 2026-05-15 Show GitHub Exploit DB Packet Storm
213 3.1 LOW
Network 		google chrome Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromi… New CWE-119
CWE-284
Incorrect Access of Indexable Resource ('Range Error') 
Improper Access Control 		CVE-2026-8545 2026-05-19 23:53 2026-05-15 Show GitHub Exploit DB Packet Storm
214 - - - A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build… New CWE-209
Information Exposure Through an Error Message 		CVE-2026-7860 2026-05-19 23:50 2026-05-19 Show GitHub Exploit DB Packet Storm
215 7.3 HIGH
Local 		- - A local privilege escalation vulnerability exists in O+ Connect because it fails to validate the identity of the caller on the pipe interface. New CWE-266
 Incorrect Privilege Assignment 		CVE-2026-22069 2026-05-19 23:50 2026-05-19 Show GitHub Exploit DB Packet Storm
216 5.3 MEDIUM
Network 		- - The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6, <7.13.8, and <7.10.12 allows any authenticated user to retrieve the full content of any… New CWE-284
Improper Access Control 		CVE-2026-32994 2026-05-19 23:50 2026-05-19 Show GitHub Exploit DB Packet Storm
217 6.3 MEDIUM
Adjacent 		- - There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can  modify configuration through the interface. New CWE-200
Information Exposure 		CVE-2026-44408 2026-05-19 23:50 2026-05-19 Show GitHub Exploit DB Packet Storm
218 4.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.… New CWE-862
 Missing Authorization 		CVE-2026-45442 2026-05-19 23:50 2026-05-19 Show GitHub Exploit DB Packet Storm
219 5.3 MEDIUM
Network 		google chrome Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory vi… New CWE-125
Out-of-bounds Read 		CVE-2026-8541 2026-05-19 23:47 2026-05-15 Show GitHub Exploit DB Packet Storm
220 - - - The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment. As a result, an attacker can assign an arbitr… New CWE-639
CWE-915
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-46721 2026-05-19 23:47 2026-05-19 Show GitHub Exploit DB Packet Storm