Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253221 9.3 危険 Google - Windows 上で稼働する Google Chrome における重要な情報を取得される脆弱性 CWE-Other
その他 		CVE-2010-0657 2010-11-24 15:00 2010-01-25 Show GitHub Exploit DB Packet Storm
253222 9.3 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0655 2010-11-24 15:00 2010-01-25 Show GitHub Exploit DB Packet Storm
253223 9.3 危険 Google - Google Chrome の sandbox/src/crosscall_server.cc における整数オーバーフロー脆弱性 CWE-189
数値処理の問題 		CVE-2010-0649 2010-11-24 15:00 2010-02-10 Show GitHub Exploit DB Packet Storm
253224 10 危険 Google - Google Chrome にて使用される Google V8 内の factory.cc における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0646 2010-11-24 14:59 2010-02-10 Show GitHub Exploit DB Packet Storm
253225 9.3 危険 Google - Google Chrome にて使用される Google V8 内の factory.cc における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0645 2010-11-24 14:59 2010-02-10 Show GitHub Exploit DB Packet Storm
253226 4.3 警告 Google - Google Chrome におけるクライアントユーザに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0643 2010-11-24 14:59 2010-02-10 Show GitHub Exploit DB Packet Storm
253227 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1665 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
253228 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1664 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
253229 10 危険 Google - Google Chrome の Google URL Parsing Library における同一生成元ポリシーを回避される脆弱性 CWE-264
CWE-noinfo
CVE-2010-1663 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
253230 7.8 危険 Google - Google Chrome の Google V8 bindings におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1506 2010-11-24 14:58 2010-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2571 9.4 CRITICAL
Network 		- - The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needi… CWE-306
Missing Authentication for Critical Function 		CVE-2026-3893 2026-04-29 05:10 2026-04-29 Show GitHub Exploit DB Packet Storm
2572 - - - A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request. CWE-694
 Use of Multiple Resources with Duplicate Identifier 		CVE-2026-5794 2026-04-29 05:10 2026-04-29 Show GitHub Exploit DB Packet Storm
2573 5.5 MEDIUM
Local 		- - A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may result in unintended exposure of sensitive information. The flaw stems from in… CWE-611
XXE 		CVE-2026-6807 2026-04-29 05:10 2026-04-29 Show GitHub Exploit DB Packet Storm
2574 6.5 MEDIUM
Network 		apache storm Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS transport is enabled in Apache … CWE-287
Improper Authentication 		CVE-2026-41081 2026-04-29 04:46 2026-04-27 Show GitHub Exploit DB Packet Storm
2575 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume tha… CWE-125
CWE-416
CWE-787
Out-of-bounds Read
 Use After Free
 Out-of-bounds Write 		CVE-2026-6785 2026-04-29 04:45 2026-04-27 Show GitHub Exploit DB Packet Storm
2576 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… CWE-125
CWE-416
CWE-787
Out-of-bounds Read
 Use After Free
 Out-of-bounds Write 		CVE-2026-6786 2026-04-29 04:45 2026-04-27 Show GitHub Exploit DB Packet Storm
2577 9.9 CRITICAL
Network 		apache camel The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExec… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-40453 2026-04-29 04:43 2026-04-27 Show GitHub Exploit DB Packet Storm
2578 7.8 HIGH
Local 		apache camel The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key directory using java.io.ObjectInputStream without applying any ObjectInputFilte… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40048 2026-04-29 04:43 2026-04-27 Show GitHub Exploit DB Packet Storm
2579 8.8 HIGH
Network 		apache camel The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. … CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40473 2026-04-29 04:43 2026-04-27 Show GitHub Exploit DB Packet Storm
2580 9.8 CRITICAL
Network 		apache camel JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via javax.jms.ObjectMessage.getObject() … CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40860 2026-04-29 04:42 2026-04-27 Show GitHub Exploit DB Packet Storm