Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1061 4.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows ブート マネージャーのセキュリティ機能のバイパスの脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-26175 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1062 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows クライアント側のキャッシュ ドライバー (csc.sys) の特権昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-26176 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1063 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-26177 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1064 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Advanced Rasterization Platform の特権昇格の脆弱性 CWE-190
CWE-681
CVE-2026-26178 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1065 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows カーネルの特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-26179 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1066 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows カーネルの特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-26180 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1067 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Microsoft Resilient File System の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26181 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1068 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-26182 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1069 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso… 		リモート アクセス管理サービス/API (RPC サーバー) の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-26183 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
1070 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows Projected File System の特権の昇格の脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-26184 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347691 - vladislav_bogdanov snmppd Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via format strin… NVD-CWE-Other
CVE-2005-1246 2008-09-6 05:48 2005-04-24 Show GitHub Exploit DB Packet Storm
347692 - novell nsure_audit webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exp… NVD-CWE-Other
CVE-2005-1247 2008-09-6 05:48 2004-01-15 Show GitHub Exploit DB Packet Storm
347693 - ipswitch whatsup SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the… NVD-CWE-Other
CVE-2005-1250 2008-09-6 05:48 2005-06-22 Show GitHub Exploit DB Packet Storm
347694 - mysql maxdb Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a … NVD-CWE-Other
CVE-2005-1274 2008-09-6 05:48 2005-04-26 Show GitHub Exploit DB Packet Storm
347695 - ethereal_group ethereal Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. NVD-CWE-Other
CVE-2005-1281 2008-09-6 05:48 2005-04-26 Show GitHub Exploit DB Packet Storm
347696 - inter7 sqwebmail SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML. NVD-CWE-Other
CVE-2005-1308 2008-09-6 05:48 2005-04-15 Show GitHub Exploit DB Packet Storm
347697 - eaden_mckee bblog Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text. NVD-CWE-Other
CVE-2005-1309 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347698 - eaden_mckee bblog SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NVD-CWE-Other
CVE-2005-1310 2008-09-6 05:48 2005-04-23 Show GitHub Exploit DB Packet Storm
347699 - yappa-ng yappa-ng Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-1311 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347700 - yappa-ng yappa-ng PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors. NVD-CWE-Other
CVE-2005-1312 2008-09-6 05:48 2005-04-24 Show GitHub Exploit DB Packet Storm