Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251591	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1888	2011-07-22 10:51	2011-07-12	Show	GitHub Exploit DB Packet Storm

251592	7.2	危険	マイクロソフト日立	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1887	2011-07-22 10:50	2011-07-12	Show	GitHub Exploit DB Packet Storm

251593	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1885	2011-07-22 10:50	2011-07-12	Show	GitHub Exploit DB Packet Storm

251594	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1881	2011-07-22 10:49	2011-07-12	Show	GitHub Exploit DB Packet Storm

251595	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1880	2011-07-22 10:47	2011-07-12	Show	GitHub Exploit DB Packet Storm

251596	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1884	2011-07-22 10:46	2011-07-12	Show	GitHub Exploit DB Packet Storm

251597	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1883	2011-07-22 10:46	2011-07-12	Show	GitHub Exploit DB Packet Storm

251598	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1882	2011-07-22 10:45	2011-07-12	Show	GitHub Exploit DB Packet Storm

251599	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1879	2011-07-22 10:44	2011-07-12	Show	GitHub Exploit DB Packet Storm

251600	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1878	2011-07-21 10:30	2011-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2401	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create an unlimited number of rfkill eve…	NVD-CWE-noinfo	CVE-2026-31670	2026-04-28 05:10	2026-04-25	Show	GitHub Exploit DB Packet Storm

2402	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: xfrm: clear trailing padding in build_polexpire() build_expire() clears the trailing padding bytes of struct xfrm_user_expire aft…	NVD-CWE-noinfo	CVE-2026-31664	2026-04-28 04:59	2026-04-25	Show	GitHub Exploit DB Packet Storm

2403	9.1	CRITICAL Network	microsoft	asp.net_core	Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-40372	2026-04-28 04:57	2026-04-22	Show	GitHub Exploit DB Packet Storm

2404	3.7	LOW Network	bacnetstack	bacnet_stack	BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, decode_signed32() in src/bacnet/bacint.c reconstructs a 32-bit signed integer from four APDU bytes …	CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior	CVE-2026-40279	2026-04-28 04:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

2405	6.8	MEDIUM Network	oauth2_proxy_project	oauth2_proxy	OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exists in OAuth2 Proxy as part of the email_domain enforcement option. An…	CWE-863 Incorrect Authorization	CVE-2026-40574	2026-04-28 04:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

2406	7.5	HIGH Network	ransomlook	ransomlook	RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web…	CWE-200 Information Exposure	CVE-2026-40584	2026-04-28 04:47	2026-04-22	Show	GitHub Exploit DB Packet Storm

2407	9.0	CRITICAL Network	craftycontrol	crafty_controller	An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform user modification actions via improper API permiss…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-5652	2026-04-28 04:47	2026-04-22	Show	GitHub Exploit DB Packet Storm

2408	4.8	MEDIUM Network	pyload-ng_project	pyload-ng	pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev98, the set_session_cookie_secure before_request handler in src/pyload/webui/app/__init__.py reads the X-Forwa…	CWE-346 Origin Validation Error	CVE-2026-40594	2026-04-28 04:43	2026-04-22	Show	GitHub Exploit DB Packet Storm

2409	5.6	MEDIUM Local	home-assistant-ecosystem	home_assistant_command-line_interface	The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates inste…	CWE-94 CWE-1336 Code Injection Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-40602	2026-04-28 04:43	2026-04-22	Show	GitHub Exploit DB Packet Storm

2410	5.5	MEDIUM Local	dayuanjiang	next_ai_draw.io	Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers (/api/state, /api/restore, …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-40608	2026-04-28 04:41	2026-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed