Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208701 9.3 危険 マイクロソフト - 複数の Microsoft 製品の MSCOMCTL.OCX の ActiveX における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0158 2015-05-11 15:58 2012-04-10 Show GitHub Exploit DB Packet Storm
208702 9.3 危険 マイクロソフト - Microsoft Excel 2002 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0101 2015-05-11 15:57 2011-04-12 Show GitHub Exploit DB Packet Storm
208703 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるスタックべースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3333 2015-05-11 15:56 2010-11-9 Show GitHub Exploit DB Packet Storm
208704 9.3 危険 マイクロソフト - Microsoft Internet Explorer における解放済みメモリを使用する脆弱性 CWE-Other
その他 		CVE-2010-0806 2015-05-11 15:55 2010-03-10 Show GitHub Exploit DB Packet Storm
208705 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3674 2015-05-11 15:53 2009-12-8 Show GitHub Exploit DB Packet Storm
208706 9.3 危険 マイクロソフト - 複数の Microsoft 製品における FEATHEADER レコードの処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3129 2015-05-11 15:52 2009-11-10 Show GitHub Exploit DB Packet Storm
208707 9.3 危険 マイクロソフト - Microsoft Office Word の .doc ファイル処理おける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2244 2015-05-11 15:51 2008-07-8 Show GitHub Exploit DB Packet Storm
208708 4 警告 IBM - IBM Rational License Key Server の Administration and Reporting Tool における Cookie を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-1907 2015-05-11 15:18 2015-04-22 Show GitHub Exploit DB Packet Storm
208709 4 警告 IBM - 複数の OS 上で稼動する IBM DB2 における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-0919 2015-05-11 14:42 2014-10-6 Show GitHub Exploit DB Packet Storm
208710 2.1 注意 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される JBoss SX および PicketBox における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-0059 2015-05-11 14:36 2014-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 7.1 HIGH
Network 		dell idrac10_firmware Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privilege… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-35155 2026-05-2 02:40 2026-04-29 Show GitHub Exploit DB Packet Storm
1082 6.1 MEDIUM
Network 		wso2 identity_server The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding. This allows for the injection of malicious Java… CWE-79
Cross-site Scripting 		CVE-2025-10503 2026-05-2 02:40 2026-04-29 Show GitHub Exploit DB Packet Storm
1083 6.4 MEDIUM
Network 		traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a potential vulnerability in Traefik's Kubernetes CRD provider cross-namespace isolatio… CWE-653
CWE-863
 Improper Isolation or Compartmentalization
 Incorrect Authorization 		CVE-2026-41174 2026-05-2 02:39 2026-05-1 Show GitHub Exploit DB Packet Storm
1084 5.5 MEDIUM
Local 		samsung android Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application. NVD-CWE-noinfo
CVE-2026-21023 2026-05-2 02:39 2026-04-29 Show GitHub Exploit DB Packet Storm
1085 3.7 LOW
Network 		traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a timing side-channel vulnerability in Traefik's BasicAuth middleware that allows an at… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-41263 2026-05-2 02:37 2026-05-1 Show GitHub Exploit DB Packet Storm
1086 4.3 MEDIUM
Network 		- - A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c of the component AMF. T… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7587 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1087 - - - Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted bus_name. - CVE-2026-37538 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1088 8.1 HIGH
Adjacent 		- - collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At… - CVE-2026-37537 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1089 8.8 HIGH
Adjacent 		- - miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request. A 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) receives … - CVE-2026-37536 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1090 7.1 HIGH
Adjacent 		- - openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit payload length nibble is us… - CVE-2026-37535 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm