Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228201 4.9 警告 VMware
Linux
- x86 プラットフォーム上の Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2011-3209 2012-12-17 15:59 2008-07-13 Show GitHub Exploit DB Packet Storm
228202 7.8 危険 VMware
Linux
- Linux Kernel の IPv4 と IPv6 の実装におけるサービス運用妨害 (ネットワーク障害) の脆弱性 CWE-DesignError
CVE-2011-3188 2012-12-17 15:57 2012-05-24 Show GitHub Exploit DB Packet Storm
228203 4.3 警告 VideoLAN - VideoLAN VLC media player の libpng_plugin におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-119
バッファエラー
CVE-2012-5470 2012-12-17 13:47 2012-10-26 Show GitHub Exploit DB Packet Storm
228204 2.1 注意 シトリックス・システムズ - Xen におけるサービス運用妨害 (無限ループ および ハングアップまたはクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-4539 2012-12-17 13:43 2012-11-13 Show GitHub Exploit DB Packet Storm
228205 4.9 警告 シトリックス・システムズ - Xen の HVMOP_pagetable_dying ハイパーコールにおけるサービス運用妨害 (ハイパーバイザクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4538 2012-12-17 13:41 2012-11-13 Show GitHub Exploit DB Packet Storm
228206 2.1 注意 シトリックス・システムズ - Xen におけるサービス運用妨害 (メモリ消費および表明違反) の脆弱性 CWE-16
環境設定
CVE-2012-4537 2012-12-17 12:30 2012-11-13 Show GitHub Exploit DB Packet Storm
228207 1.9 注意 シトリックス・システムズ - Xen におけるサービス運用妨害 (Xen の無限ループおよび物理 CPU の消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-4535 2012-12-17 12:28 2012-11-13 Show GitHub Exploit DB Packet Storm
228208 4.3 警告 Wikka Development Team - WikkaWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2012-12-17 12:15 2012-12-17 Show GitHub Exploit DB Packet Storm
228209 4.3 警告 Netsweeper, Inc. - Netsweeper の WebAdmin Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2446 2012-12-17 11:02 2012-07-9 Show GitHub Exploit DB Packet Storm
228210 10 危険 Netsweeper, Inc. - Netsweeper の WebAdmin Portal における脆弱性 CWE-noinfo
情報不足
CVE-2012-3859 2012-12-17 10:56 2012-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 7.0 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Update CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2026-33104 2026-04-18 03:20 2026-04-15 Show GitHub Exploit DB Packet Storm
162 8.1 HIGH
Network
- - The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.6. This is due to insufficient file type … New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-5718 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
163 7.5 HIGH
Network
- - The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and including 1.3.9.6. This is due to t… New CWE-22
Path Traversal
CVE-2026-5710 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
164 - - - Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silentl… New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-40320 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
165 - - - Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Python's re.search() wit… New CWE-1333
 Inefficient Regular Expression Complexity
CVE-2026-40319 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
166 7.3 HIGH
Local
- - Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handlin… New CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-21733 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
167 7.9 HIGH
Local
- - Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher se… New CWE-200
Information Exposure
CVE-2025-65104 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
168 4.3 MEDIUM
Network
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. Update CWE-200
Information Exposure
CVE-2026-33829 2026-04-18 03:15 2026-04-15 Show GitHub Exploit DB Packet Storm
169 7.3 HIGH
Local
juniper junos A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which wi… Update CWE-61
 UNIX Symbolic Link (Symlink) Following
CVE-2026-21916 2026-04-18 03:05 2026-04-10 Show GitHub Exploit DB Packet Storm
170 6.5 MEDIUM
Network
juniper junos
junos_os_evolved
An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Den… Update CWE-821
 Incorrect Synchronization
CVE-2026-21919 2026-04-18 03:04 2026-04-10 Show GitHub Exploit DB Packet Storm