Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2681 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows カーネルの情報漏えいの脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-32215 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
2682 5.5 警告
Local
マイクロソフト Microsoft Windows 11 26h1 Windows リダイレクト ドライブ バッファリング システムのサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-32216 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
2683 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows カーネルの情報漏えいの脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-32217 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
2684 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows&…
Windows カーネルの情報漏えいの脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-32218 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
2685 7 重要
Local
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Resilient File System の特権昇格の脆弱性 CWE-362
CWE-415
CVE-2026-32219 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
2686 9.8 緊急
Network
DataEase DataEase DataEaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33082 2026-04-21 10:49 2026-04-16 Show GitHub Exploit DB Packet Storm
2687 8.8 重要
Network
DataEase DataEase DataEaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33083 2026-04-21 10:49 2026-04-16 Show GitHub Exploit DB Packet Storm
2688 8.8 重要
Network
DataEase DataEase DataEaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33084 2026-04-21 10:49 2026-04-16 Show GitHub Exploit DB Packet Storm
2689 8.8 重要
Network
DataEase DataEase DataEaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33121 2026-04-21 10:49 2026-04-16 Show GitHub Exploit DB Packet Storm
2690 9.8 緊急
Network
DataEase DataEase DataEaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33122 2026-04-21 10:49 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315061 - namo deepsearch Cross-site scripting (XSS) vulnerability in mclient.cgi in Namo DeepSearch 4.5 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NVD-CWE-Other
CVE-2006-3264 2024-02-14 10:17 2006-06-28 Show GitHub Exploit DB Packet Storm
315062 - microsoft windows_live_messenger Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is import… NVD-CWE-Other
CVE-2006-3250 2024-02-14 10:17 2006-06-28 Show GitHub Exploit DB Packet Storm
315063 - ultimate_php_board ultimate_php_board The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges. CWE-255
Credentials Management
CVE-2006-3203 2024-02-14 10:17 2006-06-24 Show GitHub Exploit DB Packet Storm
315064 - ultimate_php_board ultimate_php_board Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers to determine a suitable decryption key given the … NVD-CWE-Other
CVE-2006-3204 2024-02-14 10:17 2006-06-24 Show GitHub Exploit DB Packet Storm
315065 - ultimate_php_board ultimate_php_board Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env parameters in a cookie, which comprise a persistent logon that… NVD-CWE-Other
CVE-2006-3205 2024-02-14 10:17 2006-06-24 Show GitHub Exploit DB Packet Storm
315066 - ultimate_php_board ultimate_php_board Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified "configurati… NVD-CWE-Other
CVE-2006-3208 2024-02-14 10:17 2006-06-24 Show GitHub Exploit DB Packet Storm
315067 - viart shop Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow remote attackers to inject arbitrary we… NVD-CWE-Other
CVE-2006-2979 2024-02-14 10:17 2006-06-13 Show GitHub Exploit DB Packet Storm
315068 - viart_ltd viart_shop_free SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute … NVD-CWE-Other
CVE-2006-2980 2024-02-14 10:17 2006-06-13 Show GitHub Exploit DB Packet Storm
315069 - linksys wrt54g
wrt54g_v5
Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which… NVD-CWE-Other
CVE-2006-2559 2024-02-14 10:17 2006-05-24 Show GitHub Exploit DB Packet Storm
315070 - sitecom wl-153_router_firmware
wl-153
Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which… CWE-264
Permissions, Privileges, and Access Controls
CVE-2006-2560 2024-02-14 10:17 2006-05-24 Show GitHub Exploit DB Packet Storm