Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254071 4.3 警告 Google - Google Chrome におけるダウンロードの警告ダイアログを削除される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1235 2010-11-24 14:34 2010-03-17 Show GitHub Exploit DB Packet Storm
254072 7.5 危険 Google - Google Chrome における HTTP BASIC 認証ダイアログ内で表示される URL を切断される脆弱性 CWE-noinfo
情報不足 		CVE-2010-1234 2010-11-24 14:34 2010-03-17 Show GitHub Exploit DB Packet Storm
254073 10 危険 Google - Google Chrome における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1233 2010-11-24 14:33 2010-03-17 Show GitHub Exploit DB Packet Storm
254074 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1232 2010-11-24 14:33 2010-03-17 Show GitHub Exploit DB Packet Storm
254075 10 危険 Google - Google Chrome における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2903 2010-11-24 14:33 2010-07-26 Show GitHub Exploit DB Packet Storm
254076 10 危険 Google - Google Chrome の SVG 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2902 2010-11-24 14:32 2010-07-26 Show GitHub Exploit DB Packet Storm
254077 10 危険 Google - Google Chrome のレンダリング実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2901 2010-11-24 14:32 2010-07-26 Show GitHub Exploit DB Packet Storm
254078 10 危険 Google - Google Chrome の canvas 処理における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2900 2010-11-24 14:32 2010-07-26 Show GitHub Exploit DB Packet Storm
254079 5 警告 Google - Google Chrome の layout 実装における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2899 2010-11-24 14:32 2010-07-26 Show GitHub Exploit DB Packet Storm
254080 10 危険 Google - Google Chrome における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2898 2010-11-24 14:31 2010-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3071 9.6 CRITICAL
Network 		- - An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files w… CWE-22
Path Traversal 		CVE-2026-36760 2026-05-1 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3072 6.5 MEDIUM
Network 		- - A Server-Side Request Forgery (SSRF) in the /themes/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-36759 2026-05-1 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3073 4.3 MEDIUM
Network 		- - A Server-Side Request Forgery (SSRF) in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-36758 2026-05-1 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3074 4.3 MEDIUM
Network 		- - A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-36757 2026-05-1 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3075 5.4 MEDIUM
Network 		- - A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-36756 2026-05-1 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3076 8.1 HIGH
Network 		- - An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function CWE-94
Code Injection 		CVE-2026-36340 2026-05-1 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3077 8.8 HIGH
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation. Attackers can exploit this by decla… CWE-863
 Incorrect Authorization 		CVE-2026-41404 2026-05-1 02:41 2026-04-29 Show GitHub Exploit DB Packet Storm
3078 4.0 MEDIUM
Local 		openclaw openclaw OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized access. Attackers can bypass acce… CWE-807
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-41403 2026-05-1 02:40 2026-04-29 Show GitHub Exploit DB Packet Storm
3079 5.4 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains a scope bypass vulnerability in webhook replay cache deduplication that allows authenticated attackers to replay messages across sibling targets using the same mess… CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2026-41402 2026-05-1 02:27 2026-04-29 Show GitHub Exploit DB Packet Storm
3080 7.5 HIGH
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can send oversized pre-s… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41400 2026-05-1 02:27 2026-04-29 Show GitHub Exploit DB Packet Storm