Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2761	3.7	低 Network	Smallstep	Step CA	SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-40097	2026-04-28 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

2762	8.2	重要 Network	Saltcorn	Saltcorn	Saltcornにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40163	2026-04-28 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

2763	6.1	警告 Network	AdonisJS	adonisjs/http-server AdonisJS Core	AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-40255	2026-04-28 10:11	2026-04-16	Show	GitHub Exploit DB Packet Storm

2764	9.3	緊急 Local	MinecAnton209	NovumOS	MinecAnton209のNovumOSにおける複数の脆弱性	CWE-20 CWE-269	CVE-2026-40317	2026-04-28 10:11	2026-04-18	Show	GitHub Exploit DB Packet Storm

2765	9	緊急 Local	MinecAnton209	NovumOS	MinecAnton209のNovumOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-40572	2026-04-28 10:10	2026-04-18	Show	GitHub Exploit DB Packet Storm

2766	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年04月23日）	-	-	2026-04-27 13:37	2026-04-24	Show	GitHub Exploit DB Packet Storm

2767	7.8	重要 Local	Giskard	Giskard	Giskardにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-40320	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2768	7.5	重要 Network	monetr	monetr	monetrにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40481	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2769	5.5	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40515	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2770	6.3	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-40516	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
571	8.8	HIGH Network	-	-	Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: Hig… New	CWE-122 Heap-based Buffer Overflow	CVE-2026-8529	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

572	8.8	HIGH Network	-	-	Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New	CWE-472 External Control of Assumed-Immutable Web Parameter	CVE-2026-8532	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

573	8.8	HIGH Network	-	-	Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New	CWE-843 Type Confusion	CVE-2026-8540	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

574	8.8	HIGH Network	-	-	Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New	CWE-416 Use After Free	CVE-2026-8544	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

575	7.5	HIGH Network	-	-	Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via… New	CWE-862 Missing Authorization	CVE-2026-8547	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

576	8.8	HIGH Network	-	-	Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New	CWE-416 Use After Free	CVE-2026-8549	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

577	8.8	HIGH Network	-	-	Use after free in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page… New	CWE-416 Use After Free	CVE-2026-8551	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

578	8.8	HIGH Network	-	-	Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) New	CWE-416 Use After Free	CVE-2026-8555	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

579	7.5	HIGH Network	-	-	Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (C… New	CWE-416 Use After Free	CVE-2026-8557	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

580	8.8	HIGH Network	-	-	Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) New	CWE-472 External Control of Assumed-Immutable Web Parameter	CVE-2026-8577	2026-05-15 06:19	2026-05-15	Show	GitHub Exploit DB Packet Storm