Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
61 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows Win32k の特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-34347 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
62 6.5 警告
Network
マイクロソフト Microsoft Windows Server 2025 Windows Storport ミニポート ドライバーのサービス拒否の脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-34350 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
63 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows TCP/IP の特権昇格の脆弱性 New CWE-362
競合状態
CVE-2026-34351 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
64 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows 記憶域スペース コントローラーの特権昇格の脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-35415 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
65 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-35416 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
66 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Wind…
Windows Win32k の特権の昇格の脆弱性 New CWE-843
型の取り違え
CVE-2026-35417 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
67 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Wind…
Windows Cloud Files Mini Filter ドライバーの特権の昇格の脆弱性 New CWE-367
CWE-416
CVE-2026-35418 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
68 5.5 警告
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Windows DWM Core ライブラリの情報漏えいの脆弱性 New CWE-125
境界外読み取り
CVE-2026-35419 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
69 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso…
Windows カーネルの特権の昇格の脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-35420 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
70 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows GDI のリモートでコードが実行される脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-35421 2026-05-18 12:16 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353011 - ncm ncm_content_management_system content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter. NVD-CWE-Other
CVE-2001-0418 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
353012 - way_to_the_web talkback Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the article parameter. NVD-CWE-Other
CVE-2001-0420 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
353013 - adcycle adcycle AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to ver… NVD-CWE-Other
CVE-2001-0425 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
353014 - trend_micro interscan_viruswall Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands. NVD-CWE-Other
CVE-2001-0432 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
353015 - netopia timbuktu_mac Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu. NVD-CWE-Other
CVE-2001-0438 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
353016 - david_harris mercury_nlm Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long APOP command. NVD-CWE-Other
CVE-2001-0442 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
353017 - software602 602pro_lan_suite Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characte… NVD-CWE-Other
CVE-2001-0447 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
353018 - software602 602pro_lan_suite Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS dev… NVD-CWE-Other
CVE-2001-0448 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
353019 - brs webweaver BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command. NVD-CWE-Other
CVE-2001-0452 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
353020 - brs webweaver Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories. NVD-CWE-Other
CVE-2001-0453 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm