Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248311 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における整数オーバーフローの脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1867 2012-06-15 16:36 2012-06-12 Show GitHub Exploit DB Packet Storm
248312 4.3 警告 シスコシステムズ - 複数の Cisco 製品の SIP の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2545 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
248313 6.9 警告 マイクロソフト - Microsoft Windows の win32k.sys のスレッド生成の実装における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2012-1868 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
248314 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1872 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
248315 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1873 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
248316 6 警告 EFS Technology - AutoFORM PDM Archive におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3347 2012-06-15 16:26 2012-06-13 Show GitHub Exploit DB Packet Storm
248317 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1874 2012-06-15 16:26 2012-06-12 Show GitHub Exploit DB Packet Storm
248318 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1875 2012-06-15 16:25 2012-06-12 Show GitHub Exploit DB Packet Storm
248319 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1877 2012-06-15 16:23 2012-06-12 Show GitHub Exploit DB Packet Storm
248320 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1878 2012-06-15 16:22 2012-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 5.4 MEDIUM
Network 		- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value t… New CWE-79
Cross-site Scripting 		CVE-2026-48213 2026-05-22 02:16 2026-05-22 Show GitHub Exploit DB Packet Storm
152 9.8 CRITICAL
Network 		scadabr scadabr In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin. New CWE-798
 Use of Hard-coded Credentials 		CVE-2026-8605 2026-05-22 02:16 2026-05-20 Show GitHub Exploit DB Packet Storm
153 4.2 MEDIUM
Network 		google chrome Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: M… Update CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-8564 2026-05-22 02:09 2026-05-15 Show GitHub Exploit DB Packet Storm
154 4.7 MEDIUM
Network 		google chrome Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafte… Update CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-8565 2026-05-22 02:09 2026-05-15 Show GitHub Exploit DB Packet Storm
155 8.3 HIGH
Network 		google chrome Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: … Update CWE-787
 Out-of-bounds Write 		CVE-2026-8569 2026-05-22 02:09 2026-05-15 Show GitHub Exploit DB Packet Storm
156 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev… Update CWE-942
 Permissive Cross-domain Policy with Untrusted Domains 		CVE-2026-8576 2026-05-22 02:08 2026-05-15 Show GitHub Exploit DB Packet Storm
157 3.1 LOW
Network 		google chrome Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chro… Update CWE-125
Out-of-bounds Read 		CVE-2026-8578 2026-05-22 02:08 2026-05-15 Show GitHub Exploit DB Packet Storm
158 8.8 HIGH
Network 		google chrome Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome E… Update CWE-416
 Use After Free 		CVE-2026-8587 2026-05-22 02:08 2026-05-15 Show GitHub Exploit DB Packet Storm
159 4.3 MEDIUM
Network 		google chrome Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se… Update CWE-693
 Protection Mechanism Failure 		CVE-2026-8563 2026-05-22 02:08 2026-05-15 Show GitHub Exploit DB Packet Storm
160 8.1 HIGH
Network 		memcached memcached In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass. New CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-47783 2026-05-22 02:06 2026-05-20 Show GitHub Exploit DB Packet Storm