Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4641 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 10 22h2
Microsoft Windows Server 2022
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-41088 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4642 9.8 緊急
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		Windows Netlogon のリモートでコードが実行される脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-41089 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4643 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		Data Deduplication Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用 		CVE-2026-41095 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4644 9.8 緊急
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows DNS クライアントのリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-41096 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4645 6.7 警告
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft … 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-1329
アップデートができないコンポーネントへの依存 		CVE-2026-41097 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4646 4.4 警告
Local 		マイクロソフト Microsoft 365 Copilot Android 用の Microsoft 365 Copilot のスプーフィングの脆弱性 CWE-284
CWE-Other
CVE-2026-41100 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4647 5.5 警告
Local 		マイクロソフト Microsoft Word Microsoft Edge for Android のスプーフィングの脆弱性 CWE-284
CWE-noinfo
CVE-2026-41101 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4648 5.5 警告
Local 		マイクロソフト Microsoft PowerPoint Microsoft PowerPoint for Android のスプーフィングの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41102 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4649 7.4 重要
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) の情報漏えいの脆弱性 CWE-610
CWE-73
CVE-2026-41107 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4650 8.8 重要
Network 		マイクロソフト Visual Studio Code GitHub Copilot と Visual Studio Code セキュリティ機能バイパスの脆弱性 CWE-74
インジェクション 		CVE-2026-41109 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313271 9.8 CRITICAL
Network 		clamav
debian 		clamav
debian_linux 		clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. NVD-CWE-Other
CVE-2007-6745 2024-11-21 09:40 2019-11-8 Show GitHub Exploit DB Packet Storm
313272 8.8 HIGH
Network 		sas sas_drug_development SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back or forward button in a web browser. CWE-20
 Improper Input Validation  		CVE-2007-6763 2024-11-21 09:40 2019-08-1 Show GitHub Exploit DB Packet Storm
313273 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6762 2024-11-21 09:40 2019-07-28 Show GitHub Exploit DB Packet Storm
313274 7.8 HIGH
Local 		linux linux_kernel drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trigger an incorrect count value and videobu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6761 2024-11-21 09:40 2017-04-24 Show GitHub Exploit DB Packet Storm
313275 9.8 CRITICAL
Network 		dataprobe ibootbar_firmware Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie. CWE-287
Improper Authentication 		CVE-2007-6760 2024-11-21 09:40 2017-04-8 Show GitHub Exploit DB Packet Storm
313276 9.8 CRITICAL
Network 		dataprobe ibootbar_firmware Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie. CWE-287
Improper Authentication 		CVE-2007-6759 2024-11-21 09:40 2017-04-8 Show GitHub Exploit DB Packet Storm
313277 - gehealthcare centricity_dms_firmware GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is de… CWE-255
Credentials Management 		CVE-2007-6757 2024-11-21 09:40 2015-08-4 Show GitHub Exploit DB Packet Storm
313278 - zoll monitor\/defibrillator ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attackers to modify device configuration and cau… CWE-255
Credentials Management 		CVE-2007-6756 2024-11-21 09:40 2014-08-13 Show GitHub Exploit DB Packet Storm
313279 - dell bsafe_crypto-c-micro-edition
bsafe_crypto-j 		The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skele… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2007-6755 2024-11-21 09:40 2013-10-12 Show GitHub Exploit DB Packet Storm
313280 - canonical telepathy-idle
ubuntu_linux 		telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of t… CWE-20
 Improper Input Validation  		CVE-2007-6746 2024-11-21 09:40 2013-05-22 Show GitHub Exploit DB Packet Storm