Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252961 7.2 危険 Google - Android におけるアプリケーションサンドボックスを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1149 2011-06-3 10:24 2011-04-21 Show GitHub Exploit DB Packet Storm
252962 10 危険 Google - Google Chrome の GPU プロセスにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1301 2011-06-3 10:21 2011-04-14 Show GitHub Exploit DB Packet Storm
252963 10 危険 Google
Mozilla Foundation		 - Windows 上で稼働する Mozilla Firefox、および Google Chrome における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2011-1300 2011-06-3 09:55 2011-04-7 Show GitHub Exploit DB Packet Storm
252964 5 警告 Google - WebKit の counterToCSSValue 関数におけるサービス運用妨害(DoS) の脆弱性 CWE-Other
その他 		CVE-2011-1691 2011-06-3 09:53 2011-03-28 Show GitHub Exploit DB Packet Storm
252965 4.3 警告 サイバートラスト株式会社
Rdesktop
レッドハット		 - rdesktop の disk_create 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1595 2011-06-3 09:50 2010-05-8 Show GitHub Exploit DB Packet Storm
252966 4.3 警告 GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット		 - GNU Mailman の Cgi/confirm.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0707 2011-06-3 08:58 2011-02-22 Show GitHub Exploit DB Packet Storm
252967 3.5 注意 アップル
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット		 - GNU Mailman におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3089 2011-06-3 08:56 2011-03-1 Show GitHub Exploit DB Packet Storm
252968 4.3 警告 アップル
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット		 - Mailman における複数のクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0564 2011-06-3 08:55 2008-02-5 Show GitHub Exploit DB Packet Storm
252969 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるスタックベースのオーバーフロー脆弱性 CWE-119
バッファエラー 		CVE-2011-1567 2011-06-2 09:51 2011-04-5 Show GitHub Exploit DB Packet Storm
252970 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の dc.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1566 2011-06-2 09:50 2011-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3151 9.1 CRITICAL
Network 		miyagawa plack\ Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the c… CWE-200
CWE-441
CWE-913
Information Exposure
Confused Deputy
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-7381 2026-05-7 11:10 2026-04-30 Show GitHub Exploit DB Packet Storm
3152 5.4 MEDIUM
Network 		google chrome Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via malicious network traffic. (Chromium security severity: Mediu… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-7950 2026-05-7 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
3153 7.4 HIGH
Network 		gnu
redhat 		gnutls
hardened_images
openshift_container_platform
enterprise_linux 		A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constrai… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-3833 2026-05-7 11:09 2026-05-1 Show GitHub Exploit DB Packet Storm
3154 7.5 HIGH
Network 		google chrome Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium) CWE-362
Race Condition 		CVE-2026-7948 2026-05-7 11:08 2026-05-7 Show GitHub Exploit DB Packet Storm
3155 3.1 LOW
Network 		google chrome Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. (Chromi… CWE-125
Out-of-bounds Read 		CVE-2026-7949 2026-05-7 11:07 2026-05-7 Show GitHub Exploit DB Packet Storm
3156 8.8 HIGH
Network 		google chrome Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) CWE-787
 Out-of-bounds Write 		CVE-2026-7951 2026-05-7 11:07 2026-05-7 Show GitHub Exploit DB Packet Storm
3157 4.2 MEDIUM
Network 		google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass discretionary access control via a c… CWE-693
 Protection Mechanism Failure 		CVE-2026-7952 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm
3158 3.1 LOW
Network 		google chrome Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security… CWE-362
Race Condition 		CVE-2026-7954 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm
3159 6.1 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chro… CWE-20
 Improper Input Validation  		CVE-2026-7953 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm
3160 5.3 MEDIUM
Network 		google chrome Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via… CWE-457
 Use of Uninitialized Variable 		CVE-2026-7955 2026-05-7 11:06 2026-05-7 Show GitHub Exploit DB Packet Storm