Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
41 5.9 警告
Network 		VMware Spring AI VMwareのSpring AIにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-40966 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
42 8.6 重要
Network 		VMware Spring AI VMwareのSpring AIにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-40967 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
43 7.5 重要
Adjacent 		VMware Spring Boot VMwareのSpring Bootにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 New CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-40972 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
44 7 重要
Local 		VMware Spring Boot VMwareのSpring Bootにおける安全でない一時ファイルに関する脆弱性 New CWE-377
安全でない一時ファイル 		CVE-2026-40973 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
45 7.5 重要
Network 		VMware Spring Boot VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性 New CWE-330
不十分なランダム値の使用 		CVE-2026-40975 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
46 9.1 緊急
Network 		VMware Spring Boot VMwareのSpring Bootにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-40976 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
47 6.7 警告
Local 		VMware Spring Boot VMwareのSpring Bootにおけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題 		CVE-2026-40977 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
48 8.8 重要
Network 		VMware Spring AI VMwareのSpring AIにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2026-40978 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
49 6.1 警告
Local 		VMware Spring AI VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性 New CWE-377
安全でない一時ファイル 		CVE-2026-40979 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
50 6.5 警告
Network 		VMware Spring AI VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-40980 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313681 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_7 		Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly ini… CWE-94
Code Injection 		CVE-2010-0490 2023-12-8 03:38 2010-04-1 Show GitHub Exploit DB Packet Storm
313682 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_2000 		Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Race Condit… CWE-362
Race Condition 		CVE-2010-0489 2023-12-8 03:38 2010-04-1 Show GitHub Exploit DB Packet Storm
313683 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_2000 		Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive info… CWE-200
Information Exposure 		CVE-2010-0488 2023-12-8 03:38 2010-04-1 Show GitHub Exploit DB Packet Storm
313684 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_2000 		Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initia… CWE-94
Code Injection 		CVE-2010-0267 2023-12-8 03:38 2010-04-1 Show GitHub Exploit DB Packet Storm
313685 - microsoft internet_explorer
windows_2003_server
windows_server_2003
windows_xp
windows_server_2008
windows_vista
windows_2000 		Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving acc… CWE-399
 Resource Management Errors 		CVE-2010-0806 2023-12-8 03:38 2010-03-11 Show GitHub Exploit DB Packet Storm
313686 - microsoft windows_movie_maker
windows_xp
windows_vista
producer 		Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Make… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0265 2023-12-8 03:38 2010-03-11 Show GitHub Exploit DB Packet Storm
313687 - microsoft windows_2000
windows_xp
windows_2003_server
windows_vista
windows_server_2008
windows_7 		The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2,… CWE-94
Code Injection 		CVE-2010-0252 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
313688 - microsoft windows_xp
windows_server_2008
windows_7
windows_vista 		Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, W… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0250 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
313689 - microsoft windows_server_2008
windows_vista 		The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malfor… CWE-399
 Resource Management Errors 		CVE-2010-0242 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm
313690 - microsoft windows_server_2008
windows_vista 		The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packe… CWE-94
Code Injection 		CVE-2010-0241 2023-12-8 03:38 2010-02-11 Show GitHub Exploit DB Packet Storm