Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
741	6.1	警告 Network	マイクロソフト	Windows Admin Center	Windows Admin Center のなりすましの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-32196	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

742	7.8	重要 Local	マイクロソフト	Microsoft Office Online Server Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft Office Microsoft Excel	Microsoft Excel のリモートでコードが実行される脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-32197	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

743	7.8	重要 Local	マイクロソフト	Microsoft Office Online Server Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft Office Microsoft Excel	Microsoft Excel のリモートでコードが実行される脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-32198	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

744	7.8	重要 Local	マイクロソフト	Microsoft Office Online Server Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft Office Microsoft Excel	Microsoft Excel のリモートでコードが実行される脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-32199	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

745	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC) Microsoft PowerPoint Microsoft Office	Microsoft PowerPoint のリモートでコードが実行される脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-32200	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

746	7.8	重要 Local	デル	Alienware Command Center	デルのAlienware Command Centerにおける最小権限の違反に関する脆弱性 New	CWE-272 最小権限の違反	CVE-2026-32655	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

747	2.7	低 Network	GitHub	Enterprise Server	GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 New	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3307	2026-04-30 11:03	2026-04-21	Show	GitHub Exploit DB Packet Storm

748	5.5	警告 Local	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 の(オンプレミス) で、情報漏えいの脆弱性 New	CWE-284 不適切なアクセス制御	CVE-2026-33103	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

749	10	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 New	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-33453	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

750	9.4	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-33454	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348001	-	-	-	S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on (1) /tmp/__F8499 by Sqpe, (2) /tmp/PRINT.$$.out by PRINT, (3) /tmp/SUBST$PID.TXT and…	NVD-CWE-Other	CVE-2003-1279	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348002	-	eekim	cgihtml	Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a .. (dot dot) in multipart/form-data uploads.	NVD-CWE-Other	CVE-2003-1280	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348003	-	eekim	cgihtml	cgihtml 1.69 allows local users to overwrite arbitrary files via a symlink attack on certain temporary files.	NVD-CWE-Other	CVE-2003-1281	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348004	-	-	-	IBM Net.Data allows remote attackers to obtain sensitive information such as path names, server names and possibly user names and passwords by causing the (1) $(DTW_CURRENT_FILENAME), (2) $(DATABASE)…	NVD-CWE-Other	CVE-2003-1282	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348005	-	kazaa	kazaa_media_desktop	KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could allow remote attackers to view local files and possibly execute arbitrary code.	NVD-CWE-Other	CVE-2003-1283	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348006	-	vserver	linux-vserver	Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service (kernel oops) via unknown attack vectors related to the (1) s_info and (…	NVD-CWE-Other	CVE-2003-1288	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348007	-	nukedweb	guestbookhost	Multiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Email and (3) Message fields when sig…	NVD-CWE-Other	CVE-2003-1293	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348008	-	redhat suse	enterprise_linux suse_linux	Unspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to cause xscreensaver to crash via unspecified vectors "while verifying the user-password."	NVD-CWE-Other	CVE-2003-1295	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348009	-	-	-	Easy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka options.ini) file and (2) log directory under the web root with insufficient access control, which allows remote attackers to obt…	NVD-CWE-Other	CVE-2003-1297	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348010	-	pablo_software_solutions	baby_ftp_server	Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denial of service via a large number of connections from the same IP address, which …	NVD-CWE-Other	CVE-2003-1300	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed