Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252441 5 警告 Mahara - Mahara の get_dataroot_image_path 関数におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2772 2011-11-16 15:07 2011-11-3 Show GitHub Exploit DB Packet Storm
252442 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2771 2011-11-16 15:06 2011-11-3 Show GitHub Exploit DB Packet Storm
252443 9.3 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-362
競合状態 		CVE-2011-0784 2011-11-16 10:09 2011-02-3 Show GitHub Exploit DB Packet Storm
252444 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0783 2011-11-16 10:09 2011-02-3 Show GitHub Exploit DB Packet Storm
252445 5 警告 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0782 2011-11-16 10:08 2011-02-3 Show GitHub Exploit DB Packet Storm
252446 7.5 危険 Google - Google Chrome の autofill プロファイルのマージ処理における詳細不明な脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0781 2011-11-16 10:08 2011-02-3 Show GitHub Exploit DB Packet Storm
252447 9.3 危険 Google - Google Chrome の PDF イベントハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0780 2011-11-16 10:07 2011-02-3 Show GitHub Exploit DB Packet Storm
252448 5 警告 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0779 2011-11-16 10:07 2011-02-3 Show GitHub Exploit DB Packet Storm
252449 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0777 2011-11-16 10:05 2011-02-3 Show GitHub Exploit DB Packet Storm
252450 5 警告 Google - Mac OS X 上で稼働する Google Chrome のサンドボックス実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-0776 2011-11-16 10:04 2011-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3311 9.8 CRITICAL
Network 		- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell comma… CWE-78
OS Command  		CVE-2026-42076 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm
3312 5.2 MEDIUM
Local 		- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all Ja… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42077 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm
3313 7.7 HIGH
Network 		- - Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname() but passes the origina… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41688 2026-05-8 00:45 2026-05-8 Show GitHub Exploit DB Packet Storm
3314 9.6 CRITICAL
Network 		- - Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in th… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-42090 2026-05-8 00:44 2026-05-5 Show GitHub Exploit DB Packet Storm
3315 8.1 HIGH
Network 		- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary… CWE-22
Path Traversal 		CVE-2026-42075 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
3316 5.3 MEDIUM
Network 		- - Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at /api/notes/{id}, /api/… CWE-285
Improper Authorization 		CVE-2026-41572 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
3317 6.5 MEDIUM
Network 		- - titra is an open source time tracking project. In version 0.99.52, the globalsettings Meteor publication returns all global settings without any admin or role check. Any authenticated user can subscr… CWE-200
Information Exposure 		CVE-2026-42092 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
3318 4.4 MEDIUM
Network 		- - PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Request Forgery (SSRF). The macro allows user… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42140 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
3319 6.1 MEDIUM
Local 		- - CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the W*H*D size computation inside _load_pnm() that can bypass the memory all… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-42144 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
3320 - - - In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to c… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2026-33079 2026-05-8 00:43 2026-05-7 Show GitHub Exploit DB Packet Storm