Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201241 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品の Graphics Device Interface における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0025 2017-03-27 13:41 2017-03-14 Show GitHub Exploit DB Packet Storm
201242 7.8 重要
Local 		マイクロソフト - Microsoft Windows 10 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0082 2017-03-27 11:58 2017-03-14 Show GitHub Exploit DB Packet Storm
201243 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0081 2017-03-27 11:58 2017-03-14 Show GitHub Exploit DB Packet Storm
201244 5.5 警告
Local 		マイクロソフト - 複数の Microsoft 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-0105 2017-03-27 11:40 2017-03-14 Show GitHub Exploit DB Packet Storm
201245 6.1 警告
Network 		マイクロソフト - 複数の Microsoft Windows 製品の Internet Information Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-0055 2017-03-27 11:40 2017-03-14 Show GitHub Exploit DB Packet Storm
201246 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品のカーネル API におけるプロセスを偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0050 2017-03-27 11:40 2017-03-14 Show GitHub Exploit DB Packet Storm
201247 4.7 警告
Local 		マイクロソフト - 複数の Microsoft Excel 製品および Office 互換機能パックにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-0027 2017-03-27 11:40 2017-03-14 Show GitHub Exploit DB Packet Storm
201248 5.3 警告
Adjacent 		マイクロソフト - 複数の Microsoft Windows 製品の Active Directory フェデレーションサービスにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-0043 2017-03-27 11:37 2017-03-14 Show GitHub Exploit DB Packet Storm
201249 5.5 警告
Local 		マイクロソフト - 複数の Microsoft Windows 製品の Windows DVD メーカーにおけるシステムを侵害する情報を取得される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-0045 2017-03-27 10:36 2017-03-14 Show GitHub Exploit DB Packet Storm
201250 3.1 低
Network 		マイクロソフト - 複数の Microsoft Windows 製品の Windows Media Player における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-0042 2017-03-27 10:36 2017-03-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344071 - panda panda_activescan The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL… CWE-94
Code Injection 		CVE-2009-3735 2018-10-13 06:56 2010-02-12 Show GitHub Exploit DB Packet Storm
344072 - adobe flash_player Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-4640 2018-10-13 06:41 2006-09-13 Show GitHub Exploit DB Packet Storm
344073 - microsoft office Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a … NVD-CWE-noinfo
CWE-94
Code Injection 		CVE-2006-2389 2018-10-13 06:40 2006-07-12 Show GitHub Exploit DB Packet Storm
344074 - microsoft excel Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, w… CWE-20
 Improper Input Validation  		CVE-2006-3014 2018-10-13 06:40 2006-06-22 Show GitHub Exploit DB Packet Storm
344075 - microsoft hyperlink_object_library Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not p… NVD-CWE-noinfo
CVE-2006-3438 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344076 - microsoft windows_2000
windows_2003_server
windows_xp 		Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RP… NVD-CWE-Other
CVE-2006-3439 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344077 - microsoft windows_2000
windows_2003_server
windows_xp 		Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vuln… NVD-CWE-Other
CVE-2006-3440 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344078 - microsoft windows_2000
windows_2003_server
windows_xp 		Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: wh… NVD-CWE-Other
CVE-2006-3441 2018-10-13 06:40 2006-08-9 Show GitHub Exploit DB Packet Storm
344079 - adobe flash_player Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary commands via a malformed .swf file that results in "multiple improper memory access"… NVD-CWE-noinfo
CVE-2006-3587 2018-10-13 06:40 2006-07-14 Show GitHub Exploit DB Packet Storm
344080 - adobe flash_player Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) via a malformed, compressed .swf file, a different issue tha… NVD-CWE-noinfo
CVE-2006-3588 2018-10-13 06:40 2006-07-14 Show GitHub Exploit DB Packet Storm