Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215461 7.5 危険 mybulletinboard - MyBulletinBoard におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2006-3420 2014-03-11 17:43 2006-07-7 Show GitHub Exploit DB Packet Storm
215462 5.4 警告 マイクロソフト - Windows XP および 2003 におけるバッファオーバーフローの脆弱性 - CVE-2006-3351 2014-03-11 17:43 2006-07-6 Show GitHub Exploit DB Packet Storm
215463 4.3 警告 ajax softwares - AliPAGER におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3345 2014-03-11 17:43 2006-07-3 Show GitHub Exploit DB Packet Storm
215464 2.6 注意 Atlassian - Atlassian JIRA におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3338 2014-03-11 17:43 2006-07-3 Show GitHub Exploit DB Packet Storm
215465 6.8 警告 DeltaScripts - PHP/MySQL Classifieds におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3330 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
215466 4.3 警告 e-cbd.biz - Custom dating biz dating script におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3327 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
215467 5 警告 id software - id3 Quake 3 Engine および Icculus Quake 3 Engine における書き込み保護された任意の変数を上書きされる脆弱性 - CVE-2006-3325 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
215468 2.6 注意 sitebar - SiteBar におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3320 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
215469 5 警告 comscripts - CS-Forum における CRLF インジェクションの脆弱性 - CVE-2006-3171 2014-03-11 17:43 2006-06-23 Show GitHub Exploit DB Packet Storm
215470 5 警告 Netpbm - NetPBM におけるバッファオーバーフローの脆弱性 - CVE-2006-3145 2014-03-11 17:43 2006-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
861 7.8 HIGH
Local 		- - Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. CWE-415
 Double Free 		CVE-2026-26163 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
862 7.0 HIGH
Local 		- - Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-26165 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
863 7.0 HIGH
Local 		- - Double free in Windows Shell allows an authorized attacker to elevate privileges locally. CWE-415
 Double Free 		CVE-2026-26166 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
864 8.8 HIGH
Local 		- - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-26167 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
865 7.8 HIGH
Local 		- - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locall… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-26168 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
866 6.1 MEDIUM
Local 		- - Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. CWE-126
 Buffer Over-read 		CVE-2026-26169 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
867 7.8 HIGH
Local 		- - Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. CWE-20
 Improper Input Validation  		CVE-2026-26170 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
868 7.5 HIGH
Network 		- - Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network. CWE-400
CWE-611
 Uncontrolled Resource Consumption
XXE 		CVE-2026-26171 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
869 7.8 HIGH
Local 		- - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-26172 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
870 7.0 HIGH
Local 		- - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locall… CWE-362
CWE-416
CWE-476
Race Condition
 Use After Free
 NULL Pointer Dereference 		CVE-2026-26173 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm