Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2011 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23421 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
2012 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-23422 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
2013 5.7 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows 仮想化ベース セキュリティ (VBS) のセキュリティ機能バイパスの脆弱性 CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-23670 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
2014 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		AppLocker フィルター ドライバー (applockerfltr.sys) の特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-25184 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
2015 7.1 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		リモート デスクトップのスプーフィングの脆弱性 CWE-357
危険な操作に対する不十分な警告 		CVE-2026-26151 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
2016 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Microsoft Cryptographic Services の特権の昇格の脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2026-26152 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
2017 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows 暗号化ファイル システム (EFS) の特権昇格の脆弱性 CWE-125
境界外読み取り 		CVE-2026-26153 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
2018 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso… 		Windows Server Update Service (WSUS) の改ざんの脆弱性 CWE-20
不適切な入力確認 		CVE-2026-26154 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
2019 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Microsoft Local Security Authority Subsystem Service の情報漏えいの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-26155 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
2020 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-122
CWE-125
CWE-20
CVE-2026-26156 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347761 - cisco ubr920
ubr924
ubr925 		Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read… NVD-CWE-Other
CVE-2001-1210 2008-09-11 04:09 2001-12-30 Show GitHub Exploit DB Packet Storm
347762 - aktivate aktivate Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter. NVD-CWE-Other
CVE-2001-1212 2008-09-11 04:09 2001-12-18 Show GitHub Exploit DB Packet Storm
347763 - datawizard ftpxq The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder. NVD-CWE-Other
CVE-2001-1213 2008-09-11 04:09 2001-12-18 Show GitHub Exploit DB Packet Storm
347764 - marcus_s._xenakis unix_manual manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters. NVD-CWE-Other
CVE-2001-1214 2008-09-11 04:09 2001-12-15 Show GitHub Exploit DB Packet Storm
347765 - michael_baumer pfinger Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file. NVD-CWE-Other
CVE-2001-1215 2008-09-11 04:09 2001-12-20 Show GitHub Exploit DB Packet Storm
347766 - microsoft ie Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizin… NVD-CWE-Other
CVE-2001-1218 2008-09-11 04:09 2001-12-20 Show GitHub Exploit DB Packet Storm
347767 - gnu gzip Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server. NVD-CWE-Other
CVE-2001-1228 2008-09-11 04:09 2001-11-18 Show GitHub Exploit DB Packet Storm
347768 - derek_leung pslash pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable. NVD-CWE-Other
CVE-2001-1235 2008-09-11 04:09 2001-10-2 Show GitHub Exploit DB Packet Storm
347769 - sebastian_bunka myphppagetool myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable. NVD-CWE-Other
CVE-2001-1236 2008-09-11 04:09 2001-10-2 Show GitHub Exploit DB Packet Storm
347770 - ibm aix_snmp AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection. NVD-CWE-Other
CVE-2001-0487 2008-09-11 04:08 2001-06-27 Show GitHub Exploit DB Packet Storm