Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244631 4.3 警告 dotCMS - dotCMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3708 2012-06-26 16:02 2008-08-19 Show GitHub Exploit DB Packet Storm
244632 7.5 危険 echovnc - EchoVNC Linux の CLogger::WriteFormated 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-3705 2012-06-26 16:02 2008-08-19 Show GitHub Exploit DB Packet Storm
244633 3.3 注意 amarok - AAmarok の magnatunebrowser/magnatunebrowser.cpp における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-3699 2012-06-26 16:02 2008-08-13 Show GitHub Exploit DB Packet Storm
244634 5 警告 flagship industries - Flagship Industries Ventrilo の decryption 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3680 2012-06-26 16:02 2008-08-14 Show GitHub Exploit DB Packet Storm
244635 4.3 警告 damian hickey - Freeway の admin/search_links.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3678 2012-06-26 16:02 2008-08-14 Show GitHub Exploit DB Packet Storm
244636 5 警告 gelatocms - Gelato の classes/imgsize.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3675 2012-06-26 16:02 2008-08-14 Show GitHub Exploit DB Packet Storm
244637 5 警告 Linux
Acronis International GmbH
- Acronis True Image Echo Server における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2008-3671 2012-06-26 16:02 2008-08-13 Show GitHub Exploit DB Packet Storm
244638 6.8 警告 articlefriendly - Article Friendly Pro の authordetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3670 2012-06-26 16:02 2008-08-13 Show GitHub Exploit DB Packet Storm
244639 5 警告 Bharat Mediratta - Gallery におけるクッキーをキャプチャされる脆弱性 CWE-310
暗号の問題
CVE-2008-3662 2012-06-26 16:02 2008-09-18 Show GitHub Exploit DB Packet Storm
244640 6.8 警告 articlefriendly - Article Friendly Standard の categorydetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3649 2012-06-26 16:02 2008-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
871 7.5 HIGH
Network
google chrome Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (C… CWE-416
 Use After Free
CVE-2026-8557 2026-05-19 10:31 2026-05-15 Show GitHub Exploit DB Packet Storm
872 8.8 HIGH
Network
google chrome Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2026-8558 2026-05-19 10:30 2026-05-15 Show GitHub Exploit DB Packet Storm
873 4.3 MEDIUM
Network
google chrome Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: H… CWE-942
 Permissive Cross-domain Policy with Untrusted Domains
CVE-2026-8537 2026-05-19 10:30 2026-05-15 Show GitHub Exploit DB Packet Storm
874 8.8 HIGH
Network
google chrome Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-8532 2026-05-19 10:30 2026-05-15 Show GitHub Exploit DB Packet Storm
875 8.3 HIGH
Network
google chrome Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML … CWE-416
 Use After Free
CVE-2026-8533 2026-05-19 10:30 2026-05-15 Show GitHub Exploit DB Packet Storm
876 5.3 MEDIUM
Network
google chrome Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform a denial of service via a craf… CWE-20
 Improper Input Validation 
CVE-2026-8538 2026-05-19 10:30 2026-05-15 Show GitHub Exploit DB Packet Storm
877 8.8 HIGH
Network
google chrome Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion
CVE-2026-8540 2026-05-19 10:29 2026-05-15 Show GitHub Exploit DB Packet Storm
878 6.5 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, GET /api/v1/memories/ef is accessible without authentication and executes request.ap… CWE-862
 Missing Authorization
CVE-2026-45667 2026-05-19 10:28 2026-05-16 Show GitHub Exploit DB Packet Storm
879 6.5 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the API /api/v1/notes/{note_id} endpoint lacks proper authorization checks, allowin… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-45666 2026-05-19 10:28 2026-05-16 Show GitHub Exploit DB Packet Storm
880 8.1 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Banner component due… CWE-79
Cross-site Scripting
CVE-2026-45665 2026-05-19 10:28 2026-05-16 Show GitHub Exploit DB Packet Storm