Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248851 7.1 危険 マイクロソフト - Windows XP の GPU サポート機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2600 2012-04-3 10:57 2011-06-30 Show GitHub Exploit DB Packet Storm
248852 7.6 危険 マイクロソフト - 複数の Windows 製品で使用される Microsoft Windows Fax Services Cover Page Editor の CDrawPoly::Serialize 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4701 2012-04-3 10:57 2011-01-20 Show GitHub Exploit DB Packet Storm
248853 7.8 危険 マイクロソフト - 複数の Windows 製品の ND プロトコル実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4669 2012-04-3 10:57 2011-01-7 Show GitHub Exploit DB Packet Storm
248854 9.3 危険 マイクロソフト - 複数の Windows 製品の DAO ライブラリにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-4182 2012-04-3 10:57 2010-11-4 Show GitHub Exploit DB Packet Storm
248855 7.2 危険 マイクロソフト - 複数の Windows 製品の CreateDIBPalette 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2739 2012-04-3 10:57 2010-09-7 Show GitHub Exploit DB Packet Storm
248856 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall の SIP 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1315 2012-04-2 15:50 2012-03-28 Show GitHub Exploit DB Packet Storm
248857 7.8 危険 シスコシステムズ - Cisco IOS の WAAS Express 機能におけるサービス運用妨害 (メモリ消費またはデバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1314 2012-04-2 15:48 2012-03-28 Show GitHub Exploit DB Packet Storm
248858 7.1 危険 シスコシステムズ - Cisco IOS の MACE 機能におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1312 2012-04-2 15:46 2012-03-28 Show GitHub Exploit DB Packet Storm
248859 7.8 危険 シスコシステムズ - Cisco IOS の RSVP 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1311 2012-04-2 15:45 2012-03-28 Show GitHub Exploit DB Packet Storm
248860 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall におけるサービス運用妨害 (メモリ消費またはデバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1310 2012-04-2 15:42 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1561 3.0 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… CWE-522
 Insufficiently Protected Credentials 		CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1562 5.4 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1563 2.3 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1564 2.6 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2025-62317 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1565 7.5 HIGH
Network 		libexpat_project libexpat In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-45186 2026-05-15 02:20 2026-05-10 Show GitHub Exploit DB Packet Storm
1566 5.4 MEDIUM
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low … CWE-779
 Logging of Excessive Data 		CVE-2026-20209 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1567 5.4 MEDIUM
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform … CWE-779
 Logging of Excessive Data 		CVE-2026-20210 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1568 8.6 HIGH
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system.… CWE-20
 Improper Input Validation  		CVE-2026-20224 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1569 5.3 MEDIUM
Network 		- - Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Sym… CWE-749
 Exposed Dangerous Method or Function 		CVE-2026-33584 2026-05-15 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm
1570 3.8 LOW
Physics 		- - Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.… CWE-233
 Improper Handling of Parameters 		CVE-2026-33585 2026-05-15 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm