Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5751	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32167	2026-05-11 10:59	2026-04-14	Show	GitHub Exploit DB Packet Storm

5752	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32176	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

5753	7.5	重要 Network	マイクロソフト	.NET visual studio 2022	.NET のなりすましの脆弱性	CWE-138 特殊要素の不適切な無害化	CVE-2026-32178	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

5754	6.5	警告 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-32603	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

5755	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-34000	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

5756	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における不適切な長さの値によるバッファへのアクセスに関する脆弱性	CWE-805 不適切な長さの値によるバッファへのアクセス	CVE-2026-34002	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

5757	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-34458	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

5758	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34459	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

5759	7.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34461	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

5760	7.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける複数の脆弱性	CWE-121 CWE-170	CVE-2026-34462	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356781	-	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to bugl…	NVD-CWE-Other	CVE-2002-0811	2008-09-11 04:12	2002-08-12	Show	GitHub Exploit DB Packet Storm

356782	-	mozilla	bugzilla	Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as…	NVD-CWE-Other	CVE-2002-0008	2008-09-11 04:11	2002-01-31	Show	GitHub Exploit DB Packet Storm

356783	-	mozilla	bugzilla	show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pul…	NVD-CWE-Other	CVE-2002-0009	2008-09-11 04:11	2002-01-31	Show	GitHub Exploit DB Packet Storm

356784	-	mozilla	bugzilla	Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean cha…	NVD-CWE-Other	CVE-2002-0010	2008-09-11 04:11	2002-01-31	Show	GitHub Exploit DB Packet Storm

356785	-	mozilla	bugzilla	Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login.	NVD-CWE-Other	CVE-2002-0011	2008-09-11 04:11	2002-01-31	Show	GitHub Exploit DB Packet Storm

356786	-	isc astaro	bind security_linux	Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DN…	NVD-CWE-Other	CVE-2002-0029	2008-09-11 04:11	2002-11-29	Show	GitHub Exploit DB Packet Storm

356787	-	adobe	acrobat acrobat_reader	The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by…	NVD-CWE-Other	CVE-2002-0030	2008-09-11 04:11	2003-04-2	Show	GitHub Exploit DB Packet Storm

356788	-	bindview funk_software	netrc funk_software_proxy	Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.	NVD-CWE-Other	CVE-2002-0064	2008-09-11 04:11	2002-04-22	Show	GitHub Exploit DB Packet Storm

356789	-	bindview funk_software	netrc funk_software_proxy	Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.	NVD-CWE-Other	CVE-2002-0065	2008-09-11 04:11	2002-04-22	Show	GitHub Exploit DB Packet Storm

356790	-	bindview funk_software	netrc funk_software_proxy	Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use …	NVD-CWE-Other	CVE-2002-0066	2008-09-11 04:11	2002-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed