Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3091 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		リモート デスクトップ ライセンス サービスの特権昇格の脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-26159 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3092 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		リモート デスクトップ ライセンス サービスの特権昇格の脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-26160 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3093 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows Sensor Data Service の特権昇格の脆弱性 CWE-20
CWE-822
CVE-2026-26161 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3094 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows OLE の特権の昇格の脆弱性 CWE-843
型の取り違え 		CVE-2026-26162 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3095 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows カーネルの特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-26163 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3096 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows シェルの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-26165 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3097 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows シェルの特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-26166 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3098 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26167 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3099 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26168 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3100 6.1 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows カーネル メモリの情報漏えいの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-26169 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349371 - ipswitch imail POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system. NVD-CWE-Other
CVE-2001-1280 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349372 - ipswitch imail Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" we… NVD-CWE-Other
CVE-2001-1281 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349373 - ipswitch imail Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information. NVD-CWE-Other
CVE-2001-1282 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349374 - ipswitch imail The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other ch… NVD-CWE-Other
CVE-2001-1283 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349375 - ipswitch imail Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users. NVD-CWE-Other
CVE-2001-1284 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349376 - ipswitch imail Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter. NVD-CWE-Other
CVE-2001-1285 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349377 - ipswitch imail Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be … NVD-CWE-Other
CVE-2001-1286 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349378 - ipswitch imail Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. NVD-CWE-Other
CVE-2001-1287 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349379 - id_software quake_3_arena Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters. NVD-CWE-Other
CVE-2001-1289 2008-09-11 04:10 2001-07-29 Show GitHub Exploit DB Packet Storm
349380 - 3com 3cr29223 Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request. NVD-CWE-Other
CVE-2001-1293 2008-09-11 04:10 2001-09-26 Show GitHub Exploit DB Packet Storm