Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3081 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-23421 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
3082 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-23422 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
3083 5.7 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows 仮想化ベース セキュリティ (VBS) のセキュリティ機能バイパスの脆弱性 CWE-822
信頼性のないポインタデリファレンス
CVE-2026-23670 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
3084 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind…
AppLocker フィルター ドライバー (applockerfltr.sys) の特権昇格の脆弱性 CWE-362
競合状態
CVE-2026-25184 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
3085 7.1 重要
Network
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
リモート デスクトップのスプーフィングの脆弱性 CWE-357
危険な操作に対する不十分な警告
CVE-2026-26151 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
3086 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Microsoft Cryptographic Services の特権の昇格の脆弱性 CWE-922
重要な情報のセキュアでない格納
CVE-2026-26152 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
3087 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows 暗号化ファイル システム (EFS) の特権昇格の脆弱性 CWE-125
境界外読み取り
CVE-2026-26153 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
3088 7.5 重要
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso…
Windows Server Update Service (WSUS) の改ざんの脆弱性 CWE-20
不適切な入力確認
CVE-2026-26154 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
3089 6.5 警告
Network
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Microsoft Local Security Authority Subsystem Service の情報漏えいの脆弱性 CWE-126
バッファオーバーリード
CVE-2026-26155 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
3090 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-122
CWE-125
CWE-20
CVE-2026-26156 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350601 - net_portal_dynamic_system net_portal_dynamic_system Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) admin.php, … NVD-CWE-Other
CVE-2005-1803 2008-09-6 05:50 2005-05-29 Show GitHub Exploit DB Packet Storm
350602 - net_portal_dynamic_system net_portal_dynamic_system Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.… NVD-CWE-Other
CVE-2005-1804 2008-09-6 05:50 2005-05-29 Show GitHub Exploit DB Packet Storm
350603 - mybulletinboard mybulletinboard Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile. NVD-CWE-Other
CVE-2005-1811 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
350604 - hummingbird connectivity Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long a… NVD-CWE-Other
CVE-2005-1815 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
350605 - invision_power_services invision_board Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen. NVD-CWE-Other
CVE-2005-1816 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
350606 - invision_power_services invision_board Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters. NVD-CWE-Other
CVE-2005-1817 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
350607 - newlife_blogger newlife_blogger Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors. NVD-CWE-Other
CVE-2005-1818 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
350608 - nikosoft webmail Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-1819 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
350609 - zeroboard zeroboard zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function. NVD-CWE-Other
CVE-2005-1820 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
350610 - gnu mailutils The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the modu… NVD-CWE-Other
CVE-2005-1824 2008-09-6 05:50 2005-06-2 Show GitHub Exploit DB Packet Storm