Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208271	10	危険	アップル日立サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment における JMX の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3143	2015-08-11 15:48	2012-10-16	Show	GitHub Exploit DB Packet Storm

208272	10	危険	アップル日立サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) における Hotspot の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1725	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208273	10	危険	アップルサン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) における Deployment の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1722	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208274	10	危険	アップルサン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) における Deployment の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1721	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208275	5	警告	アップル日立サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) における CORBA の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1719	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208276	5	警告	アップル日立サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) における Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1718	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208277	2.1	注意	サン・マイクロシステムズ日立	-	Oracle Java SE の Java Runtime Environment における Solaris または Linux の印刷処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1717	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208278	10	危険	アップル日立サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) における Swing の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1716	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208279	10	危険	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE の Java Runtime Environment (JRE) における 2D の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1713	2015-08-11 15:48	2012-06-12	Show	GitHub Exploit DB Packet Storm

208280	10	危険	サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) における Beans の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1682	2015-08-11 15:48	2012-08-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1631	7.5	HIGH Network	-	-	Improper neutralization of special elements in M365 Copilot allows an unauthorized attacker to disclose information over a network.	CWE-138 Improper Neutralization of Special Elements	CVE-2026-26129	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1632	7.5	HIGH Network	-	-	Improper neutralization of special elements in output used by a downstream component ('injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.	CWE-74 Injection	CVE-2026-26164	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1633	8.8	HIGH Network	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.	CWE-79 Cross-site Scripting	CVE-2026-32207	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1634	9.9	CRITICAL Network	-	-	Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.	CWE-284 Improper Access Control	CVE-2026-33109	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1635	7.5	HIGH Network	-	-	Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.	CWE-77 Command Injection	CVE-2026-33111	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1636	9.6	CRITICAL Network	-	-	Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.	CWE-285 Improper Authorization	CVE-2026-33823	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1637	9.0	CRITICAL Network	-	-	Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.	CWE-20 Improper Input Validation	CVE-2026-33844	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1638	8.2	HIGH Network	-	-	Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.	CWE-610 Externally Controlled Reference to a Resource in Another Sphere	CVE-2026-34327	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1639	9.6	CRITICAL Network	-	-	Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.	CWE-77 Command Injection	CVE-2026-35428	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

1640	8.6	HIGH Network	-	-	Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.	CWE-284 Improper Access Control	CVE-2026-35435	2026-05-9 00:47	2026-05-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed