Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249091	6.8	警告	シスコシステムズ	-	Cisco WebEx Meeting Center T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3270	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

249092	9.3	危険	シスコシステムズ	-	Cisco WRF および ARF Player T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3269	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

249093	6.4	警告	orbeon	-	Orbeon Forms の XForms サービスの xforms-server コンポーネントにおけるイントラネットサーバへ HTTP リクエストを送信される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3260	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

249094	5	警告	シマンテックインテル	-	Symantec Antivirus Corporate Edition などで使用される Intel AMS の GetStringAMSHandler 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3268	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

249095	6.5	警告	ifdefined	-	BugTracker.NET における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3267	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

249096	3.5	注意	ifdefined	-	BugTracker.NET におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3266	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

249097	2.1	注意	Novell	-	Novell Identity Manager のエンジンインストーラにおける重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3264	2012-03-27 18:42	2010-08-23	Show	GitHub Exploit DB Packet Storm

249098	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の setup/frames/index.inc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3263	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

249099	4.3	警告	flock	-	Flock Browser におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3262	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

249100	5	警告	RSAセキュリティ	-	RSA Authentication Agent for Web におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3261	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
101	9.1	CRITICAL Network	-	-	Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network. New	CWE-303 Incorrect Implementation of Authentication Algorithm	CVE-2026-41103	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

102	7.1	HIGH Local	-	-	Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. New	CWE-284 Improper Access Control	CVE-2026-41102	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

103	7.1	HIGH Local	-	-	Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. New	CWE-284 Improper Access Control	CVE-2026-41101	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

104	4.4	MEDIUM Local	-	-	Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. New	CWE-284 Improper Access Control	CVE-2026-41100	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

105	6.7	MEDIUM Local	-	-	Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New	CWE-1329 Reliance on Component That is Not Updateable	CVE-2026-41097	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

106	9.8	CRITICAL Network	-	-	Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. New	CWE-122 Heap-based Buffer Overflow	CVE-2026-41096	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

107	7.8	HIGH Local	-	-	Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. New	CWE-416 Use After Free	CVE-2026-41095	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

108	8.8	HIGH Network	-	-	Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network. New	CWE-94 Code Injection	CVE-2026-41094	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

109	9.8	CRITICAL Network	-	-	Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. New	CWE-121 Stack-based Buffer Overflow	CVE-2026-41089	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

110	7.8	HIGH Local	-	-	External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. New	CWE-73 External Control of File Name or Path	CVE-2026-41088	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed