Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255021	6.9	警告	サイバートラスト株式会社 Python Software Foundation レッドハット	-	Python の PySys_SetArgv API 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2008-5983	2011-02-4 13:58	2009-04-14	Show	GitHub Exploit DB Packet Storm

255022	2.6	注意	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2322	2011-02-3 14:55	2010-06-18	Show	GitHub Exploit DB Packet Storm

255023	5.8	警告	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0831	2011-02-3 14:52	2010-06-18	Show	GitHub Exploit DB Packet Storm

255024	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3652	2011-02-2 15:07	2010-11-4	Show	GitHub Exploit DB Packet Storm

255025	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3650	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

255026	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3649	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

255027	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3648	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

255028	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3647	2011-02-2 15:05	2010-11-4	Show	GitHub Exploit DB Packet Storm

255029	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3646	2011-02-2 15:05	2010-11-4	Show	GitHub Exploit DB Packet Storm

255030	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3645	2011-02-2 15:05	2010-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3801	6.5	MEDIUM Network	-	-	titra is an open source time tracking project. In version 0.99.52, the globalsettings Meteor publication returns all global settings without any admin or role check. Any authenticated user can subscr…	CWE-200 Information Exposure	CVE-2026-42092	2026-05-8 00:43	2026-05-5	Show	GitHub Exploit DB Packet Storm

3802	4.4	MEDIUM Network	-	-	PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Request Forgery (SSRF). The macro allows user…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42140	2026-05-8 00:43	2026-05-5	Show	GitHub Exploit DB Packet Storm

3803	6.1	MEDIUM Local	-	-	CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the WHD size computation inside _load_pnm() that can bypass the memory all…	CWE-190 Integer Overflow or Wraparound	CVE-2026-42144	2026-05-8 00:43	2026-05-5	Show	GitHub Exploit DB Packet Storm

3804	-		-	-	In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to c…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2026-33079	2026-05-8 00:43	2026-05-7	Show	GitHub Exploit DB Packet Storm

3805	8.8	HIGH Network	-	-	YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data['id_fiche'…	CWE-89 SQL Injection	CVE-2026-41143	2026-05-8 00:43	2026-05-7	Show	GitHub Exploit DB Packet Storm

3806	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Since commit aab5c6f20023 ("gpio: set device type for GPIO chi…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-31732	2026-05-8 00:36	2026-05-2	Show	GitHub Exploit DB Packet Storm

3807	5.4	MEDIUM Network	google	chrome	Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-8015	2026-05-8 00:30	2026-05-7	Show	GitHub Exploit DB Packet Storm

3808	8.8	HIGH Network	google	chrome	Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)	CWE-416 Use After Free	CVE-2026-8016	2026-05-8 00:29	2026-05-7	Show	GitHub Exploit DB Packet Storm

3809	3.1	LOW Network	google	chrome	Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)	CWE-1300 Improper Protection of Physical Side Channels	CVE-2026-8017	2026-05-8 00:29	2026-05-7	Show	GitHub Exploit DB Packet Storm

3810	5.4	MEDIUM Network	google	chrome	Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-8019	2026-05-8 00:26	2026-05-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed