Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4871 7.5 重要
Adjacent
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7338 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
4872 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-7339 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
4873 8.1 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-7346 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
4874 8.1 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7347 2026-05-7 12:27 2026-04-28 Show GitHub Exploit DB Packet Storm
4875 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7348 2026-05-7 12:27 2026-04-28 Show GitHub Exploit DB Packet Storm
4876 6.3 警告
Network
Shenzhen Tenda Technology Co.,Ltd. 4g300 ファームウェア Shenzhen Tenda Technology Co.,Ltd.の4g300 ファームウェアにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7469 2026-05-7 12:27 2026-04-30 Show GitHub Exploit DB Packet Storm
4877 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. 4g300 ファームウェア Shenzhen Tenda Technology Co.,Ltd.の4g300 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7470 2026-05-7 12:27 2026-04-30 Show GitHub Exploit DB Packet Storm
4878 7 重要
Local
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-20
CWE-502
CWE-502
CVE-2026-5473 2026-05-7 12:27 2026-04-3 Show GitHub Exploit DB Packet Storm
4879 8.8 重要
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-119
CWE-122
CVE-2026-5474 2026-05-7 12:27 2026-04-3 Show GitHub Exploit DB Packet Storm
4880 5.4 警告
Network
TensorOpera FEDML TensorOperaのFEDMLにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-5535 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350081 - dead_pirate_software simplecam Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URL. NVD-CWE-Other
CVE-2005-1493 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350082 - megabook megabook Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) entryid or (2) password parameter. NVD-CWE-Other
CVE-2005-1494 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350083 - oracle application_server
oracle10g
oracle9i
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection. NVD-CWE-Other
CVE-2005-1495 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350084 - oracle application_server
oracle10g
oracle9i
Applying patchset 10.1.0.4 is fixing this issue for Oracle 10g. Oracle 9i is still vulnerable. NVD-CWE-Other
CVE-2005-1495 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350085 - oracle application_server
oracle10g
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user. NVD-CWE-Other
CVE-2005-1496 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350086 - oracle application_server
oracle10g
Applying patchset 10.1.0.4 is fixing this issue. NVD-CWE-Other
CVE-2005-1496 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350087 - mywebland mybloggie index.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an invalid post_id parameter, which reveals the path in an error message. NVD-CWE-Other
CVE-2005-1497 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350088 - mywebland mybloggie Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) year parameter in viewmode.php, or the (2) cat_id, (3)… NVD-CWE-Other
CVE-2005-1498 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350089 - mywebland mybloggie Download newest myBloggie from http://mywebland.com/ NVD-CWE-Other
CVE-2005-1498 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm
350090 - mywebland mybloggie delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id parameter. NVD-CWE-Other
CVE-2005-1499 2017-07-11 10:32 2005-05-11 Show GitHub Exploit DB Packet Storm