Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1801 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Simple Search Discovery Protocol (SSDP) サービスの特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-32082 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
1802 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Simple Search Discovery Protocol (SSDP) サービスの特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-32083 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
1803 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows 印刷スプーラーの情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-32084 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
1804 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		リモート プロシージャ コールの情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-32085 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
1805 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Function Discovery Service (fdwsd.dll) の特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-32086 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
1806 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Function Discovery Service (fdwsd.dll) の特権昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-32087 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
1807 5.7 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows 生体認証サービスのセキュリティ機能のバイパスの脆弱性 CWE-362
競合状態 		CVE-2026-32088 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
1808 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Speech Brokered API の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-32089 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
1809 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Speech Brokered API の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-32090 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
1810 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Microsoft Resilient File System の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-32091 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314411 9.8 CRITICAL
Network 		- - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2023-48690 2024-01-3 00:15 2023-12-22 Show GitHub Exploit DB Packet Storm
314412 9.8 CRITICAL
Network 		- - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2023-48688 2024-01-3 00:15 2023-12-22 Show GitHub Exploit DB Packet Storm
314413 9.8 CRITICAL
Network 		- - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2023-48686 2024-01-3 00:15 2023-12-22 Show GitHub Exploit DB Packet Storm
314414 7.8 HIGH
Local 		- - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2023-36546 2023-12-31 12:15 2023-08-8 Show GitHub Exploit DB Packet Storm
314415 6.1 MEDIUM
Network 		cacti cacti Reflected Cross Site Scripting (XSS) vulnerability in Cacti v1.2.25, allows remote attackers to escalate privileges when uploading an xml template file via templates_import.php. CWE-79
Cross-site Scripting 		CVE-2023-50569 2023-12-29 15:23 2023-12-22 Show GitHub Exploit DB Packet Storm
314416 - postnuke postnuke The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive information via a direct request to simple_smarty.php, which reveals the path in an error message. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1697 2023-12-29 04:27 2005-05-24 Show GitHub Exploit DB Packet Storm
314417 - wordpress wordpress Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1688 2023-12-29 04:27 2005-05-20 Show GitHub Exploit DB Packet Storm
314418 7.5 HIGH
Network 		cisco
symantec
hp
avaya
redhat
freebsd
openbsd
apple
sco
4d
checkpoint
dell
lite
neoteris
novell
openssl
sgi
stonesoft
tarantella
vmware
bluecoat
securecomputing
sun 		firewall_services_module
clientless_vpn_gateway_4400
apache-based_web_server
aaa_server
sg203
hp-ux
enterprise_linux_desktop
ciscoworks_common_management_foundation
freebsd 		The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null… CWE-476
 NULL Pointer Dereference 		CVE-2004-0079 2023-12-29 00:33 2004-11-23 Show GitHub Exploit DB Packet Storm
314419 7.5 HIGH
Network 		veritas backup_exec VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet … CWE-476
 NULL Pointer Dereference 		CVE-2005-0772 2023-12-29 00:29 2005-06-28 Show GitHub Exploit DB Packet Storm
314420 7.5 HIGH
Network 		skystream emr5000 SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer excepti… CWE-476
 NULL Pointer Dereference 		CVE-2002-1912 2023-12-29 00:29 2002-12-31 Show GitHub Exploit DB Packet Storm