Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204381 8.8 重要
Network 		マイクロソフト - Microsoft Windows Server 2008 および 2012 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3228 2016-06-17 14:56 2016-06-14 Show GitHub Exploit DB Packet Storm
204382 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品の SMB サーバコンポーネントにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3225 2016-06-17 14:56 2016-06-14 Show GitHub Exploit DB Packet Storm
204383 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品の Adobe Type Manager フォントドライバの atmfd.dll における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3220 2016-06-17 14:03 2016-06-14 Show GitHub Exploit DB Packet Storm
204384 7.8 重要
Local 		マイクロソフト - Microsoft Windows 10 のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3219 2016-06-17 14:03 2016-06-14 Show GitHub Exploit DB Packet Storm
204385 4.3 警告
Network 		マイクロソフト - 複数の Microsoft Windows 製品の Graphics コンポーネントの GDI32.dll における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-3216 2016-06-17 14:03 2016-06-14 Show GitHub Exploit DB Packet Storm
204386 5 警告
Local 		マイクロソフト - Microsoft Windows Server 2012 Gold および R2 の Virtual PCI 仮想サービスプロバイダにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-3232 2016-06-17 13:49 2016-06-14 Show GitHub Exploit DB Packet Storm
204387 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3221 2016-06-17 13:49 2016-06-14 Show GitHub Exploit DB Packet Storm
204388 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3218 2016-06-17 13:49 2016-06-14 Show GitHub Exploit DB Packet Storm
204389 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Visio 製品における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3235 2016-06-17 12:29 2016-06-14 Show GitHub Exploit DB Packet Storm
204390 7.3 重要
Local 		マイクロソフト - 複数の Microsoft Excel 製品および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-3233 2016-06-17 12:29 2016-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 7.4 HIGH
Network 		- - epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who can MITM the TLS connection between the client and the IDP (within the TI netwo… New CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-45575 2026-05-28 04:41 2026-05-27 Show GitHub Exploit DB Packet Storm
1162 6.5 MEDIUM
Adjacent 		- - epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic he… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-47672 2026-05-28 04:41 2026-05-27 Show GitHub Exploit DB Packet Storm
1163 8.1 HIGH
Adjacent 		- - epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45… New CWE-295
Improper Certificate Validation  		CVE-2026-44900 2026-05-28 04:41 2026-05-27 Show GitHub Exploit DB Packet Storm
1164 8.1 HIGH
Adjacent 		- - epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor can present any TLS c… New CWE-295
Improper Certificate Validation  		CVE-2026-45574 2026-05-28 04:41 2026-05-27 Show GitHub Exploit DB Packet Storm
1165 - - - Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job", ...) handler in 'El… New CWE-862
 Missing Authorization 		CVE-2026-48592 2026-05-28 04:38 2026-05-27 Show GitHub Exploit DB Packet Storm
1166 - - - Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to sched… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-48593 2026-05-28 04:38 2026-05-27 Show GitHub Exploit DB Packet Storm
1167 5.5 MEDIUM
Local 		- - Gryph provides a security layer for AI coding agents. Prior to 0.7.0, Gryph implements logging levels that determine what content is logged to a local sqlite database. The README incorrectly mentions… New CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2026-45046 2026-05-28 04:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1168 5.9 MEDIUM
Network 		putty putty PuTTY 0.72 before 0.84 has a double free in RSA KEX. Update CWE-415
 Double Free 		CVE-2026-48850 2026-05-28 04:14 2026-05-26 Show GitHub Exploit DB Packet Storm
1169 3.1 LOW
Network 		putty putty PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session. Update CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-48851 2026-05-28 04:12 2026-05-26 Show GitHub Exploit DB Packet Storm
1170 3.7 LOW
Network 		putty putty PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. Update CWE-617
 Reachable Assertion 		CVE-2026-48852 2026-05-28 04:11 2026-05-26 Show GitHub Exploit DB Packet Storm