Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249061	7.5	危険	gatesoft	-	GateSoft DocuSafe の ECO.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4736	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

249062	7.5	危険	ecommercemax	-	Ecommercemax Solutions DGS の shoppingcart.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4735	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

249063	2.6	注意	amix	-	Skeletonz CMS 1.0 のコメント機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4734	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

249064	4.3	警告	LightNEasy	-	LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4753	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249065	6.8	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4752	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249066	6	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4751	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249067	6.8	警告	blogcms	-	BLOG:CMS の admin/libs/ADMIN.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4750	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249068	6.8	警告	Zikula Foundation	-	Zikula におけるクロスサイトリクエストフォージェリ攻撃を誘発される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4729	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

249069	5	警告	Zikula Foundation	-	Zikula における乱数化をベースにした保護機能を破られる脆弱性	CWE-310 暗号の問題	CVE-2010-4728	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

249070	10	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4727	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1071	7.8	HIGH Local	-	-	Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. Update	CWE-416 Use After Free	CVE-2026-41095	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1072	9.8	CRITICAL Network	-	-	Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. Update	CWE-122 Heap-based Buffer Overflow	CVE-2026-41096	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1073	6.7	MEDIUM Local	-	-	Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Update	CWE-1329 Reliance on Component That is Not Updateable	CVE-2026-41097	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1074	4.4	MEDIUM Local	-	-	Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. Update	CWE-284 Improper Access Control	CVE-2026-41100	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1075	7.1	HIGH Local	-	-	Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. Update	CWE-284 Improper Access Control	CVE-2026-41101	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1076	7.1	HIGH Local	-	-	Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. Update	CWE-284 Improper Access Control	CVE-2026-41102	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1077	9.1	CRITICAL Network	-	-	Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network. Update	CWE-303 Incorrect Implementation of Authentication Algorithm	CVE-2026-41103	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1078	7.4	HIGH Network	-	-	External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. Update	CWE-73 External Control of File Name or Path	CVE-2026-41107	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1079	8.8	HIGH Network	-	-	Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature ove… Update	CWE-74 Injection	CVE-2026-41109	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1080	6.3	MEDIUM Local	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Update	CWE-59 CWE-79 CWE-200 Link Following Cross-site Scripting Information Exposure	CVE-2026-41610	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed