Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2231 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2025-40536 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2232 7.5 重要
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2025-40537 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2233 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40551 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2234 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40552 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2235 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40553 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2236 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40554 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2237 5.5 警告
Local 		Pure Storage, Inc. Portworx Pure Storage, Inc.のPortworxにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2025-9127 2026-02-5 15:51 2025-12-4 Show GitHub Exploit DB Packet Storm
2238 6.5 警告
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2020-36968 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2239 8.8 重要
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2020-36969 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
2240 9.8 緊急
Network 		Joakim Nygard and Jacob Oettinger Webgrind Webgrind projectのWebgrindにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2023-54339 2026-02-5 15:51 2026-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314811 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_2000 		Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive info… CWE-200
Information Exposure 		CVE-2010-0488 2023-12-8 03:38 2010-04-1 Show GitHub Exploit DB Packet Storm
314812 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_2000 		Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initia… CWE-94
Code Injection 		CVE-2010-0267 2023-12-8 03:38 2010-04-1 Show GitHub Exploit DB Packet Storm
314813 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_2000 		Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving acc… CWE-399
 Resource Management Errors 		CVE-2010-0806 2023-12-8 03:38 2010-03-11 Show GitHub Exploit DB Packet Storm
314814 - microsoft windows_movie_maker
windows_xp
windows_vista
producer 		Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Make… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0265 2023-12-8 03:38 2010-03-11 Show GitHub Exploit DB Packet Storm
314815 - microsoft windows_2000
windows_xp
windows_2003_server
windows_vista
windows_server_2008
windows_7 		The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2,… CWE-94
Code Injection 		CVE-2010-0252 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
314816 - microsoft windows_xp
windows_server_2008
windows_7
windows_vista 		Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, W… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0250 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
314817 - microsoft windows_server_2008
windows_vista 		The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malfor… CWE-399
 Resource Management Errors 		CVE-2010-0242 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
314818 - microsoft windows_server_2008
windows_vista 		The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packe… CWE-94
Code Injection 		CVE-2010-0241 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
314819 - microsoft windows_server_2008
windows_vista 		The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulati… CWE-94
Code Injection 		CVE-2010-0240 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
314820 - microsoft windows_server_2008
windows_vista 		The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement pa… CWE-94
Code Injection 		CVE-2010-0239 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm