Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2211 8.8 重要
Network
CloudARK KubePlus CloudARKのKubePlusにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-29955 2026-05-7 12:06 2026-04-13 Show GitHub Exploit DB Packet Storm
2212 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける領域間での誤ったリソース移動に関する脆弱性 CWE-669
領域間での誤ったリソース移動
CVE-2026-31431 2026-05-7 12:06 2026-04-22 Show GitHub Exploit DB Packet Storm
2213 5.3 警告
Network
レッドハット
kernel.org
util-linux
Red Hat Hardened Images
kernel.org等の複数ベンダの製品における代替名による認証回避に関する脆弱性 CWE-289
代替名による認証回避
CVE-2026-3184 2026-05-7 12:06 2026-04-3 Show GitHub Exploit DB Packet Storm
2214 5.5 警告
Local
Electron electron Electronのelectronにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-34764 2026-05-7 12:06 2026-04-6 Show GitHub Exploit DB Packet Storm
2215 10 緊急
Network
traefik traefik traefikにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証
CVE-2026-35051 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
2216 7.1 重要
Network
デル iDRAC10 Firmware デルのiDRAC10 Firmwareにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護
CVE-2026-35155 2026-05-7 12:06 2026-04-29 Show GitHub Exploit DB Packet Storm
2217 7.2 重要
Network
Progress Software Corporation ECS Connection Manager
loadmaster
Connection Manager for ObjectScale
Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-3517 2026-05-7 12:06 2026-04-20 Show GitHub Exploit DB Packet Storm
2218 7.2 重要
Network
Progress Software Corporation ECS Connection Manager
loadmaster
Connection Manager for ObjectScale
Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-3518 2026-05-7 12:06 2026-04-20 Show GitHub Exploit DB Packet Storm
2219 7.2 重要
Network
Progress Software Corporation ECS Connection Manager
loadmaster
Connection Manager for ObjectScale
Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-3519 2026-05-7 12:06 2026-04-20 Show GitHub Exploit DB Packet Storm
2220 8.1 重要
Network
FreeBSD FreeBSD FreeBSDにおける複数の脆弱性 CWE-122
CWE-130
CVE-2026-35547 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317931 - microsoft office_infopath
sharepoint_server
sharepoint_services
internet_explorer
Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services… CWE-79
Cross-site Scripting
CVE-2010-1257 2023-12-8 03:38 2010-06-9 Show GitHub Exploit DB Packet Storm
317932 - microsoft internet_information_server Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors r… CWE-94
Code Injection
CVE-2010-1256 2023-12-8 03:38 2010-06-9 Show GitHub Exploit DB Packet Storm
317933 - microsoft windows_2000
windows_xp
windows_2003_server
windows_vista
windows_server_2008
windows_7
Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windo… CWE-20
 Improper Input Validation 
CVE-2010-0819 2023-12-8 03:38 2010-06-9 Show GitHub Exploit DB Packet Storm
317934 - microsoft windows_xp
windows_server_2003
windows_2003_server
windows_server_2008
windows_vista
Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched I… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0812 2023-12-8 03:38 2010-04-15 Show GitHub Exploit DB Packet Storm
317935 - microsoft windows_server_2008
windows_vista
The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service … NVD-CWE-noinfo
CVE-2010-0810 2023-12-8 03:38 2010-04-15 Show GitHub Exploit DB Packet Storm
317936 - microsoft windows_7
windows_server_2008
windows_vista
The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows… NVD-CWE-Other
CVE-2010-0481 2023-12-8 03:38 2010-04-15 Show GitHub Exploit DB Packet Storm
317937 - microsoft outlook_express
windows_live_mail
windows_mail
Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and… CWE-189
Numeric Errors
CVE-2010-0816 2023-12-8 03:38 2010-05-12 Show GitHub Exploit DB Packet Storm
317938 - microsoft windows_7
windows_2000
windows_xp
windows_server_2003
windows_2003_server
windows_server_2008
windows_vista
The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 200… CWE-20
 Improper Input Validation 
CVE-2010-0487 2023-12-8 03:38 2010-04-15 Show GitHub Exploit DB Packet Storm
317939 - microsoft windows_7
windows_2000
windows_xp
windows_server_2003
windows_2003_server
windows_server_2008
windows_vista
The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, … CWE-20
 Improper Input Validation 
CVE-2010-0486 2023-12-8 03:38 2010-04-15 Show GitHub Exploit DB Packet Storm
317940 - microsoft windows_2000
windows_xp
windows_server_2003
windows_2003_server
windows_server_2008
windows_vista
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow rem… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-0480 2023-12-8 03:38 2010-04-15 Show GitHub Exploit DB Packet Storm