Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
41 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows 10 1809
Microsoft Windows Server 2012
Microsoft&n… 		Windows Server Update Service (WSUS) の改ざんの脆弱性 New CWE-20
CWE-248
CVE-2026-50328 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
42 9.8 緊急
Network 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft … 		Windows リモート デスクトップ クライアントの特権昇格の脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-50330 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
43 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft … 		Windows Application Model Core API の特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-50331 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
44 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft … 		Windows プッシュ通知の情報漏えいの脆弱性 New CWE-200
情報漏えい 		CVE-2026-50334 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
45 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 10 1809
Microsoft Wind… 		Windows オペレーティング システムの特権昇格の脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-50335 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
46 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Windows 11 25h2 		Windows Media の特権の昇格の脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-50336 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
47 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft … 		Windows 通知の特権昇格の脆弱性 New CWE-704
不正な型変換またはキャスト 		CVE-2026-50337 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
48 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 10 1809
Microsoft Wind… 		Windows プッシュ通知の情報漏えいの脆弱性 New CWE-200
情報漏えい 		CVE-2026-50339 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
49 8.8 重要
Network 		マイクロソフト Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2025 		Windows ランタイムの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-50340 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
50 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows Server 2016
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft … 		Windows NTFS の情報漏えいの脆弱性 New CWE-126
バッファオーバーリード 		CVE-2026-50341 2026-07-22 10:18 2026-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 22, 2026, 4:02 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
368001 - realnetworks realjukebox_2
realjukebox_2_plus
realone_player 		Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long val… NVD-CWE-Other
CVE-2002-1014 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368002 - realnetworks realjukebox_2
realjukebox_2_plus
realone_player 		RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini fil… NVD-CWE-Other
CVE-2002-1015 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368003 - adobe digital_editions Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the original data files. NVD-CWE-Other
CVE-2002-1016 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368004 - adobe digital_editions Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the a… NVD-CWE-Other
CVE-2002-1017 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368005 - working_resources_inc. badblue BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte. NVD-CWE-Other
CVE-2002-1021 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368006 - working_resources_inc. badblue BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges. NVD-CWE-Other
CVE-2002-1022 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368007 - working_resources_inc. badblue BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI. NVD-CWE-Other
CVE-2002-1023 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368008 - macromedia jrun JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed. NVD-CWE-Other
CVE-2002-1025 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368009 - macromedia sitespring Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly trigger… NVD-CWE-Other
CVE-2002-1026 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
368010 - macromedia sitespring Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 50… NVD-CWE-Other
CVE-2002-1027 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm