Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200531	6.1	警告 Network	マイクロソフト	-	Microsoft Edge におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-7206	2016-12-21 16:34	2016-12-13	Show	GitHub Exploit DB Packet Storm

200532	7.5	重要 Network	マイクロソフト	-	Microsoft Edge における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-7181	2016-12-21 16:34	2016-12-13	Show	GitHub Exploit DB Packet Storm

200533	7.8	重要 Local	マイクロソフト	-	Microsoft Windows 10 および Windows Server 2016 の保護カーネルモードの実装における VTL の保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-7271	2016-12-21 16:13	2016-12-13	Show	GitHub Exploit DB Packet Storm

200534	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-7260	2016-12-21 15:42	2016-12-13	Show	GitHub Exploit DB Packet Storm

200535	5.5	警告 Local	マイクロソフト	-	Microsoft Windows 10 および Windows Server 2016 のカーネルにおける任意のプロセスから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-7258	2016-12-21 14:46	2016-12-13	Show	GitHub Exploit DB Packet Storm

200536	7.5	重要 Network	マイクロソフト	-	Microsoft .NET Framework の SQL サーバ用データプロバイダーにおける Always Encrypted 機能による保護を回避される脆弱性	CWE-310 暗号の問題	CVE-2016-7270	2016-12-21 14:45	2016-12-13	Show	GitHub Exploit DB Packet Storm

200537	7	重要 Local	Joyent, Inc.	-	Joyent SmartOS の Hyprlofs ファイルシステムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9035	2016-12-21 14:33	2016-12-12	Show	GitHub Exploit DB Packet Storm

200538	7	重要 Local	Joyent, Inc.	-	Joyent SmartOS の Hyprlofs ファイルシステムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9034	2016-12-21 14:33	2016-12-12	Show	GitHub Exploit DB Packet Storm

200539	7	重要 Local	Joyent, Inc.	-	Joyent SmartOS の Hyprlofs ファイルシステムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9033	2016-12-21 14:33	2016-12-12	Show	GitHub Exploit DB Packet Storm

200540	7	重要 Local	Joyent, Inc.	-	Joyent SmartOS の Hyprlofs ファイルシステムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9032	2016-12-21 14:33	2016-12-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2001	3.0	LOW Local	-	-	Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unintended commands or cause a minor …	CWE-78 OS Command	CVE-2026-44072	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2002	5.0	MEDIUM Network	-	-	Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error condition…	CWE-273 Improper Check for Dropped Privileges	CVE-2026-44073	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2003	6.7	MEDIUM Local	-	-	Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.	CWE-78 OS Command	CVE-2026-44076	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2004	3.1	LOW Network	-	-	A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that triggers incorrect format string pro…	CWE-134 Use of Externally-Controlled Format String	CVE-2026-7835	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2005	3.1	LOW Network	-	-	An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification v…	CWE-682 Incorrect Calculation	CVE-2026-7836	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2006	3.1	LOW Network	-	-	A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authen…	CWE-561 Dead Code	CVE-2026-44057	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2007	3.7	LOW Network	-	-	Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a minor denial of servic…	CWE-693 Protection Mechanism Failure	CVE-2026-44071	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2008	3.7	LOW Network	-	-	Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker…	CWE-682 Incorrect Calculation	CVE-2026-44074	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2009	3.7	LOW Network	-	-	A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, resulting in unintended session op…	CWE-484	CVE-2026-44075	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2010	3.7	LOW Network	-	-	A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attacker to cause limited da…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-7837	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm