Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250211 10 危険 Schneider Electric - InduSoft Web Studio の CEServer.exe における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2011-4051 2012-02-3 16:57 2011-12-5 Show GitHub Exploit DB Packet Storm
250212 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy Historian におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3320 2012-02-3 16:56 2011-11-2 Show GitHub Exploit DB Packet Storm
250213 10 危険 General Electric Company - GE Intelligent Platforms Proficy Applications におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1919 2012-02-3 16:55 2011-11-2 Show GitHub Exploit DB Packet Storm
250214 10 危険 General Electric Company - GE Intelligent Platforms Proficy Historian におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1918 2012-02-3 16:54 2011-11-2 Show GitHub Exploit DB Packet Storm
250215 5 警告 Cogent Real-Time Systems Inc. - Cogent DataHub の Web サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3500 2012-02-3 16:51 2011-09-16 Show GitHub Exploit DB Packet Storm
250216 10 危険 Cogent Real-Time Systems Inc. - Cogent DataHub の DH_OneSecondTick 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3493 2012-02-3 16:49 2011-09-16 Show GitHub Exploit DB Packet Storm
250217 5 警告 Beckhoff Automation - Beckhoff TwinCAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3486 2012-02-3 16:47 2011-09-16 Show GitHub Exploit DB Packet Storm
250218 7.5 危険 Novell - Novell Open Enterprise Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4194 2012-02-3 16:38 2012-01-31 Show GitHub Exploit DB Packet Storm
250219 6.8 警告 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザの最高権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4144 2012-02-3 16:37 2012-02-2 Show GitHub Exploit DB Packet Storm
250220 6.4 警告 The PHP Group - PHP における任意のファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0057 2012-02-3 16:34 2011-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2081 9.1 CRITICAL
Network 		miyagawa plack\ Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the c… CWE-200
CWE-441
CWE-913
Information Exposure
Confused Deputy
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-7381 2026-05-7 11:10 2026-04-30 Show GitHub Exploit DB Packet Storm
2082 5.4 MEDIUM
Network 		google chrome Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via malicious network traffic. (Chromium security severity: Mediu… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-7950 2026-05-7 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
2083 7.4 HIGH
Network 		gnu
redhat 		gnutls
hardened_images
openshift_container_platform
enterprise_linux 		A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constrai… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-3833 2026-05-7 11:09 2026-05-1 Show GitHub Exploit DB Packet Storm
2084 7.5 HIGH
Network 		google chrome Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium) CWE-362
Race Condition 		CVE-2026-7948 2026-05-7 11:08 2026-05-7 Show GitHub Exploit DB Packet Storm
2085 3.1 LOW
Network 		google chrome Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. (Chromi… CWE-125
Out-of-bounds Read 		CVE-2026-7949 2026-05-7 11:07 2026-05-7 Show GitHub Exploit DB Packet Storm
2086 8.8 HIGH
Network 		google chrome Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) CWE-787
 Out-of-bounds Write 		CVE-2026-7951 2026-05-7 11:07 2026-05-7 Show GitHub Exploit DB Packet Storm
2087 4.2 MEDIUM
Network 		google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass discretionary access control via a c… CWE-693
 Protection Mechanism Failure 		CVE-2026-7952 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm
2088 3.1 LOW
Network 		google chrome Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security… CWE-362
Race Condition 		CVE-2026-7954 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm
2089 6.1 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chro… CWE-20
 Improper Input Validation  		CVE-2026-7953 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm
2090 5.3 MEDIUM
Network 		google chrome Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via… CWE-457
 Use of Uninitialized Variable 		CVE-2026-7955 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm