Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253541 9.3 危険 マイクロソフト - Microsoft Visio 2003 における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3148 2011-07-25 11:07 2011-07-12 Show GitHub Exploit DB Packet Storm
253542 2.1 注意 マイクロソフト - Microsoft Windows XP の win32k.sys における任意のデータを読まれる脆弱性 CWE-Other
その他 		CVE-2011-1886 2011-07-22 10:52 2011-07-12 Show GitHub Exploit DB Packet Storm
253543 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1888 2011-07-22 10:51 2011-07-12 Show GitHub Exploit DB Packet Storm
253544 7.2 危険 マイクロソフト
日立		 - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1887 2011-07-22 10:50 2011-07-12 Show GitHub Exploit DB Packet Storm
253545 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1885 2011-07-22 10:50 2011-07-12 Show GitHub Exploit DB Packet Storm
253546 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1881 2011-07-22 10:49 2011-07-12 Show GitHub Exploit DB Packet Storm
253547 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1880 2011-07-22 10:47 2011-07-12 Show GitHub Exploit DB Packet Storm
253548 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1884 2011-07-22 10:46 2011-07-12 Show GitHub Exploit DB Packet Storm
253549 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1883 2011-07-22 10:46 2011-07-12 Show GitHub Exploit DB Packet Storm
253550 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1882 2011-07-22 10:45 2011-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3491 3.4 LOW
Adjacent 		- - In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2026-44405 2026-05-8 00:53 2026-05-6 Show GitHub Exploit DB Packet Storm
3492 8.8 HIGH
Adjacent 		- - gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopl… CWE-1327
 Binding to an Unrestricted IP Address 		CVE-2026-42503 2026-05-8 00:53 2026-05-7 Show GitHub Exploit DB Packet Storm
3493 8.7 HIGH
Network 		- - RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's make_sign_in_key() function and exam.py's gen_ticket_code() functi… CWE-330
CWE-338
 Use of Insufficiently Random Values
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2026-41505 2026-05-8 00:53 2026-05-8 Show GitHub Exploit DB Packet Storm
3494 5.4 MEDIUM
Network 		- - Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function CWE-79
Cross-site Scripting 		CVE-2026-36358 2026-05-8 00:53 2026-05-6 Show GitHub Exploit DB Packet Storm
3495 8.3 HIGH
Network 		- - Dagster is an orchestration platform for the development, production, and observation of data assets. Prior to Dagster Core version 1.13.1 and prior to Dagster libraries version 0.29.1, the DuckDB, S… CWE-89
SQL Injection 		CVE-2026-41490 2026-05-8 00:50 2026-05-7 Show GitHub Exploit DB Packet Storm
3496 5.5 MEDIUM
Local 		- - CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size without validating it aga… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-42146 2026-05-8 00:50 2026-05-5 Show GitHub Exploit DB Packet Storm
3497 7.4 HIGH
Network 		- - A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A rem… CWE-295
Improper Certificate Validation  		CVE-2026-42011 2026-05-8 00:48 2026-05-8 Show GitHub Exploit DB Packet Storm
3498 8.3 HIGH
Network 		- - Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parameters that were passed verbatim to goqu.L() — a raw SQL lite… CWE-89
SQL Injection 		CVE-2026-41422 2026-05-8 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm
3499 9.8 CRITICAL
Network 		- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell comma… CWE-78
OS Command  		CVE-2026-42076 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm
3500 5.2 MEDIUM
Local 		- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all Ja… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42077 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm