Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2401 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows インストーラーの特権の昇格の脆弱性 CWE-280
権限管理不備 		CVE-2026-27910 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2402 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows ユーザー インターフェイス コアの特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-27911 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2403 8 重要
Adjacent 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso… 		Windows Kerberos の特権の昇格の脆弱性 CWE-285
不適切な認可 		CVE-2026-27912 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2404 7.7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Windows Server 2016 		Windows BitLocker セキュリティ機能バイパスの脆弱性 CWE-20
不適切な入力確認 		CVE-2026-27913 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2405 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Microsoft 管理コンソールの特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-27914 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2406 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows UPnP Device Host の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-27915 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2407 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows UPnP Device Host の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-27916 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2408 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows WFP NDIS ライトウェイト フィルター ドライバー (wfplwfs.sys) の特権昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-27917 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2409 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows シェルの特権の昇格の脆弱性 CWE-362
競合状態 		CVE-2026-27918 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
2410 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows UPnP Device Host の特権の昇格の脆弱性 CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-27919 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314801 7.5 HIGH
Network 		tolvanen eraser Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted. CWE-459
 Incomplete Cleanup 		CVE-2002-2068 2024-02-9 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314802 7.5 HIGH
Network 		pgp personal_privacy PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted. CWE-459
 Incomplete Cleanup 		CVE-2002-2069 2024-02-9 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314803 7.5 HIGH
Network 		east-tec eraser East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be del… CWE-459
 Incomplete Cleanup 		CVE-2002-2067 2024-02-9 05:28 2002-12-31 Show GitHub Exploit DB Packet Storm
314804 5.5 MEDIUM
Local 		oracle forms_builder Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information. CWE-459
 Incomplete Cleanup 		CVE-2005-2293 2024-02-9 05:13 2005-07-18 Show GitHub Exploit DB Packet Storm
314805 7.5 HIGH
Network 		jetico bcwipe BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information th… CWE-459
 Incomplete Cleanup 		CVE-2002-2066 2024-02-9 05:13 2002-12-31 Show GitHub Exploit DB Packet Storm
314806 5.5 MEDIUM
Local 		pgp freeware
corporate_desktop
personal_security 		An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to str… CWE-459
 Incomplete Cleanup 		CVE-2002-0788 2024-02-9 05:13 2002-08-12 Show GitHub Exploit DB Packet Storm
314807 5.5 MEDIUM
Local 		icq icq ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. CWE-459
 Incomplete Cleanup 		CVE-2000-0552 2024-02-9 05:12 2000-06-6 Show GitHub Exploit DB Packet Storm
314808 9.8 CRITICAL
Network 		risearch risearch
risearch_pro 		RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, o… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2004-2061 2024-02-9 04:56 2004-07-27 Show GitHub Exploit DB Packet Storm
314809 9.8 CRITICAL
Network 		siemens db4web DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that sp… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2002-1484 2024-02-9 04:56 2003-04-22 Show GitHub Exploit DB Packet Storm
314810 7.5 HIGH
Network 		adobe acrobat_reader
acrobat 		The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulne… CWE-611
XXE 		CVE-2005-1306 2024-02-9 04:55 2005-06-15 Show GitHub Exploit DB Packet Storm