Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
131 7.8 重要
Local
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft …
Windows ネットワーク接続サービスの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-50476 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
132 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 1809
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft&n…
Windows USB ハブ ドライバーの特権昇格の脆弱性 New CWE-822
信頼性のないポインタデリファレンス
CVE-2026-50479 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
133 7.8 重要
Local
マイクロソフト Microsoft Windows 10 1607
Microsoft Windows Server 2012
Microsoft Windows Server 2016
Windows Web プロキシ自動検出プロトコル (WPAD) の特権昇格の脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-50480 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
134 7.8 重要
Local
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft …
Windows NTFS のリモートでコードが実行される脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-50482 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
135 5.5 警告
Local
マイクロソフト Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2025
Windows Graphics コンポーネントの情報漏えいの脆弱性 New CWE-200
情報漏えい
CVE-2026-50483 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
136 7.8 重要
Local
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 10 1809
Microsoft Wind…
Windows Hyper-V の特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-54129 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
137 6.8 警告
Physics
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows カーネルの特権の昇格の脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-54132 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
138 8.8 重要
Adjacent
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft …
Windows Reliable Multicast Transport Driver (RMCAST) のリモートでコードが実行される脆弱性 New CWE-191
整数アンダーフロー
CVE-2026-54982 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
139 7.5 重要
Network
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft …
Windows Active Directory フェデレーション サービス (AD FS) のサービス拒否の脆弱性 New CWE-121
スタックオーバーフロー
CVE-2026-54983 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
140 7.8 重要
Local
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft …
Windows Win32k の特権の昇格の脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-54986 2026-07-22 10:13 2026-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 22, 2026, 4:02 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
368101 - gravity_storm_software service_pack_manager_2000 Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such… NVD-CWE-Other
CVE-2002-0479 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368102 - microsoft outlook An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that refer… NVD-CWE-Other
CVE-2002-0481 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368103 - newlog netsupport_manager Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request. NVD-CWE-Other
CVE-2002-0482 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368104 - francisco_burzi php-nuke index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that l… NVD-CWE-Other
CVE-2002-0483 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368105 - workforceroi xpede Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by… NVD-CWE-Other
CVE-2002-0487 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368106 - instant_web_mail instant_web_mail Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain m… NVD-CWE-Other
CVE-2002-0490 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368107 - alguest alguest admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileg… NVD-CWE-Other
CVE-2002-0491 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368108 - dcscripts dcshop dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter. NVD-CWE-Other
CVE-2002-0492 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368109 - websight_directory_system websight_directory_system Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission con… NVD-CWE-Other
CVE-2002-0494 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
368110 - websight_directory_system websight_directory_system This vulnerability is addressed in the following product release: WebSight Directory System, WebSight Directory System, 0.1.1 NVD-CWE-Other
CVE-2002-0494 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm