Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2881 7.1 重要
Network 		Daylight Studio FUEL CMS Daylight StudioのFUEL CMSにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2026-30459 2026-04-24 11:31 2026-04-16 Show GitHub Exploit DB Packet Storm
2882 9.8 緊急
Network 		TOTOLINK a3300r ファームウェア TOTOLINKのa3300r ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-31170 2026-04-24 11:31 2026-04-9 Show GitHub Exploit DB Packet Storm
2883 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Simple Search Discovery Protocol (SSDP) サービスの特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-32068 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
2884 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows Projected File System の特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-32069 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
2885 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32070 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
2886 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows ローカル セキュリティ機関サブシステム サービス (LSASS) のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-32071 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
2887 6.2 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Active Directory のなりすましの脆弱性 CWE-287
不適切な認証 		CVE-2026-32072 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
2888 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32073 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
2889 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows Projected File System の特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-32074 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
2890 7.5 重要
Network 		EMQX nanomq EMQXのnanomqにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-32135 2026-04-24 11:31 2026-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350661 - phpgroupware phpgroupware Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions. NVD-CWE-Other
CVE-2003-0657 2008-09-6 05:34 2003-08-27 Show GitHub Exploit DB Packet Storm
350662 - sgi irix NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypas… NVD-CWE-Other
CVE-2003-0683 2008-09-6 05:34 2003-11-3 Show GitHub Exploit DB Packet Storm
350663 - hp hp-ux Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable. NVD-CWE-Other
CVE-2003-0061 2008-09-6 05:33 2002-01-11 Show GitHub Exploit DB Packet Storm
350664 - nokia 6210_handset Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service (crash, lockup, or restart) via a Multi-Part vCard with fields containing a large number of form… NVD-CWE-Other
CVE-2003-0103 2008-09-6 05:33 2003-03-7 Show GitHub Exploit DB Packet Storm
350665 - peoplesoft peopletools Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet. NVD-CWE-Other
CVE-2003-0104 2008-09-6 05:33 2003-03-18 Show GitHub Exploit DB Packet Storm
350666 - ibm aix The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorize… NVD-CWE-Other
CVE-2003-0119 2008-09-6 05:33 2004-02-3 Show GitHub Exploit DB Packet Storm
350667 - mhc-utils mhc-utils adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name. NVD-CWE-Other
CVE-2003-0120 2008-09-6 05:33 2003-03-7 Show GitHub Exploit DB Packet Storm
350668 - multitech routefinder_550_vpn The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin" account with a blank password, which could allow attackers on the LAN side to … NVD-CWE-Other
CVE-2003-0126 2008-09-6 05:33 2003-03-18 Show GitHub Exploit DB Packet Storm
350669 - adobe acrobat_reader Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, whic… NVD-CWE-Other
CVE-2003-0142 2008-09-6 05:33 2003-08-18 Show GitHub Exploit DB Packet Storm
350670 - mozilla bonsai Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user. NVD-CWE-Other
CVE-2003-0152 2008-09-6 05:33 2003-04-2 Show GitHub Exploit DB Packet Storm