Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250451 5.1 警告 remi jean - Zwii の system/system.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-0505 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250452 4.3 警告 vamshop - VaM Shop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0504 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250453 6.8 警告 vamshop - VaM Shop におけるクロスサイトフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-0503 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250454 9.3 危険 musanim - Music Animation Machine MIDI Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-0502 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250455 9.3 危険 musanim - Music Animation Machine MIDI Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0501 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250456 9.3 危険 verytools - VideoSpirit Pro および VideoSpirit Lite におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0500 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250457 9.3 危険 verytools - VideoSpirit Pro および VideoSpirit Lite におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0499 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250458 9.3 危険 ノキア - Nokia Multimedia Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0498 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
250459 7.8 危険 サイベース - Appeon などの製品で使用される Sybase EAServer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-0497 2012-03-27 18:42 2011-01-11 Show GitHub Exploit DB Packet Storm
250460 10 危険 サイベース - Appeon などの製品で使用される Sybase EAServer における任意の Web サービスおよび任意のコードをインストールされる脆弱性 CWE-DesignError
CVE-2011-0496 2012-03-27 18:42 2011-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3491 9.3 CRITICAL
Local 		microsoft windows_11_23h2
windows_server_2022 		Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-40402 2026-05-16 00:23 2026-05-13 Show GitHub Exploit DB Packet Storm
3492 8.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally. CWE-122
Heap-based Buffer Overflow 		CVE-2026-40403 2026-05-16 00:22 2026-05-13 Show GitHub Exploit DB Packet Storm
3493 7.5 HIGH
Network 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. CWE-476
 NULL Pointer Dereference 		CVE-2026-40405 2026-05-16 00:20 2026-05-13 Show GitHub Exploit DB Packet Storm
3494 7.5 HIGH
Network 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network. CWE-416
 Use After Free 		CVE-2026-40406 2026-05-16 00:20 2026-05-13 Show GitHub Exploit DB Packet Storm
3495 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. CWE-122
Heap-based Buffer Overflow 		CVE-2026-40407 2026-05-16 00:19 2026-05-13 Show GitHub Exploit DB Packet Storm
3496 9.1 CRITICAL
Network 		- - Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to forward local secrets such as API tokens… CWE-94
Code Injection 		CVE-2026-8634 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm
3497 4.3 MEDIUM
Network 		- - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Readers can enumerate… CWE-863
 Incorrect Authorization 		CVE-2026-45148 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm
3498 7.5 HIGH
Network 		- - libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciou… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-44673 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm
3499 - - - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the kernel stores Attribute View (AV / database) names without any HTML escape, then a render template uses raw strings.… CWE-79
CWE-94
CWE-1188
Cross-site Scripting
Code Injection
 Insecure Default Initialization of Resource 		CVE-2026-44670 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm
3500 - - - HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString() function in convertCore.php is missing backtick (`) and tab (\t) from its … CWE-78
OS Command  		CVE-2026-44666 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm