Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2481	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7974	2026-05-8 12:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2482	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7975	2026-05-8 12:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2483	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7976	2026-05-8 12:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2484	6.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-7977	2026-05-8 12:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2485	8.1	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-7978	2026-05-8 12:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2486	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-7979	2026-05-8 12:15	2026-05-6	Show	GitHub Exploit DB Packet Storm

2487	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7980	2026-05-8 12:15	2026-05-6	Show	GitHub Exploit DB Packet Storm

2488	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-7981	2026-05-8 12:15	2026-05-6	Show	GitHub Exploit DB Packet Storm

2489	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-7982	2026-05-8 12:15	2026-05-6	Show	GitHub Exploit DB Packet Storm

2490	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-7983	2026-05-8 12:15	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1571	6.1	MEDIUM Network	vercel	next.js	Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be…	CWE-79 Cross-site Scripting	CVE-2026-44580	2026-05-15 03:33	2026-05-14	Show	GitHub Exploit DB Packet Storm

1572	7.5	HIGH Network	-	-	Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.	CWE-253 Incorrect Check of Function Return Value	CVE-2026-46419	2026-05-15 03:31	2026-05-14	Show	GitHub Exploit DB Packet Storm

1573	-		-	-	Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL (via the web interface or the API). In affected versi…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-44515	2026-05-15 03:31	2026-05-15	Show	GitHub Exploit DB Packet Storm

1574	6.5	MEDIUM Network	-	-	Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A…	CWE-1385 Missing Origin Validation in WebSockets	CVE-2026-44514	2026-05-15 03:31	2026-05-15	Show	GitHub Exploit DB Packet Storm

1575	8.6	HIGH Network	-	-	Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.	CWE-250 Execution with Unnecessary Privileges	CVE-2026-29205	2026-05-15 03:30	2026-05-14	Show	GitHub Exploit DB Packet Storm

1576	8.2	HIGH Network	-	-	SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.	CWE-295 Improper Certificate Validation	CVE-2026-32992	2026-05-15 03:30	2026-05-14	Show	GitHub Exploit DB Packet Storm

1577	4.7	MEDIUM Network	vercel	next.js	Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable to stored cross-site…	CWE-79 Cross-site Scripting	CVE-2026-44581	2026-05-15 03:30	2026-05-14	Show	GitHub Exploit DB Packet Storm

1578	-		-	-	Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers. From 2.4.0, to before 2.13.0, when requesting content from a Static Route, it was possible t…	CWE-22 Path Traversal	CVE-2026-42598	2026-05-15 03:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

1579	5.7	MEDIUM Network	-	-	Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in docling_graph/…	CWE-601 CWE-918 Open Redirect Server-Side Request Forgery (SSRF)	CVE-2026-44520	2026-05-15 03:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

1580	-		-	-	gittuf is a platform-agnostic Git security system. Prior to 0.14.0, an attacker with push access to gittuf's Reference State Log (RSL) can roll back the current policy to any previous policy trusted …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44544	2026-05-15 03:27	2026-05-15	Show	GitHub Exploit DB Packet Storm