Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1421 7.8 重要
Local
Zoom Video Communications, Inc. Zoom Workplace VDI
Zoom Meeting SDK
Zoom Workplace Desktop
Zoom Video Communications, Inc.のZoom Meeting SDK等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2026-30900 2026-05-18 12:18 2026-03-11 Show GitHub Exploit DB Packet Storm
1422 7.8 重要
Local
Zoom Video Communications, Inc. Zoom Rooms Zoom Video Communications, Inc.のZoom Roomsにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-30901 2026-05-18 12:18 2026-03-11 Show GitHub Exploit DB Packet Storm
1423 7.8 重要
Local
Zoom Video Communications, Inc. Zoom Workplace VDI
Zoom Rooms
Zoom Workplace Desktop
Zoom Video Communications, Inc.のZoom Rooms等の複数製品における権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-30902 2026-05-18 12:18 2026-03-11 Show GitHub Exploit DB Packet Storm
1424 9.8 緊急
Network
Zoom Video Communications, Inc. Zoom Workplace VDI
Zoom Workplace Desktop
Zoom Video Communications, Inc.のZoom Workplace Desktop等の複数製品における複数の脆弱性 CWE-610
CWE-73
CVE-2026-30903 2026-05-18 12:18 2026-03-11 Show GitHub Exploit DB Packet Storm
1425 7.8 重要
Local
lightningai pytorch lightning Lightning AIのPyTorch Lightningにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-31221 2026-05-18 12:18 2026-05-12 Show GitHub Exploit DB Packet Storm
1426 7.5 重要
Adjacent
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows ネイティブ WiFi ミニポート ドライバーのリモートでコードが実行される脆弱性 CWE-362
CWE-416
CVE-2026-32161 2026-05-18 12:18 2026-05-12 Show GitHub Exploit DB Packet Storm
1427 6.7 警告
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows リッチ テキスト エディットの特権昇格の脆弱性 CWE-415
二重解放
CVE-2026-32170 2026-05-18 12:18 2026-05-12 Show GitHub Exploit DB Packet Storm
1428 4.4 警告
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows フィルタリング プラットフォーム (WFP) のセキュリティ機能のバイパスの脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-32209 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
1429 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows Event Logging Service の特権の昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-33834 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
1430 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Wind…
Windows Cloud Files Mini Filter ドライバーの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-33835 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355441 - businessobjects webintelligence WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions. NVD-CWE-Other
CVE-2003-1249 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355442 - efficient_networks 5861_dsl_router Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service (crash) via a flood of TCP SYN pack… NVD-CWE-Other
CVE-2003-1250 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355443 - nx n_x_web_content_management_system_2002 The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via … NVD-CWE-Other
CVE-2003-1251 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355444 - kelli_shaver s8forum register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, w… NVD-CWE-Other
CVE-2003-1252 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355445 - sangwan_kim bookmark4u PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load… CWE-94
Code Injection
CVE-2003-1253 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355446 - - - Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to execute arbitrary PHP code via (1) head.php, (2) apb_common.php, or (3) apb_view_class.php by modifying the APB_SETTINGS parameter to refe… NVD-CWE-Other
CVE-2003-1254 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355447 - e-theni e-theni aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include parameter to reference a URL on a remote web server that contains para_langue.php. NVD-CWE-Other
CVE-2003-1256 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355448 - e-theni e-theni Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2003-1256 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355449 - e-theni e-theni find_theni_home.php in E-theni allows remote attackers to obtain sensitive system information via a URL request which executes phpinfo. NVD-CWE-Other
CVE-2003-1257 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
355450 - versatilebulletinboard versatilebulletinboard activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid. NVD-CWE-Other
CVE-2003-1258 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm