|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 28, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 215621 | 5.4 | 警告 | libiitech | - | Android 用 Pet Salon アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5907 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215622 | 5.4 | 警告 | youngmoney | - | Android 用 Lil Wayne Slots: FREE SLOTS アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5906 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215623 | 5.4 | 警告 | meucarrinho | - | Android 用 Grocery List - Tomatoes アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5905 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215624 | 5.4 | 警告 | miniinthebox | - | Android 用 MiniInTheBox Online Shopping アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5904 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215625 | 5.4 | 警告 | mobileiron | - | Android 用 Mobile@Work アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5903 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215626 | 5.4 | 警告 | uacinemas | - | Android 用 UA Cinemas - Mobile ticketing アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5902 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215627 | 5.4 | 警告 | webelinx | - | Android 用 Beauty Bible - App for Girls アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5901 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215628 | 5.4 | 警告 | myhomeworkapp | - | Android 用 myHomework Student Planner アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5900 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215629 | 5.4 | 警告 | nespresso | - | Android 用 Nespresso アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5899 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
| 215630 | 5.4 | 警告 | heavy duty truck driver simulator 3d project | - | Android 用 Heavy Duty Truck Driver Simulator 3D アプリケーションにおけるサーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5898 | 2014-12-17 09:57 | 2014-09-3 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 28, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1961 | 8.8 |
HIGH
Local |
microsoft |
365_apps office office_long_term_servicing_channel |
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
CWE-1220
Insufficient Granularity of Access Control |
CVE-2026-35436 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1962 | 5.5 |
MEDIUM
Local |
microsoft |
365_apps office office_long_term_servicing_channel word |
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CWE-552
Files or Directories Accessible to External Parties |
CVE-2026-35440 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1963 | 8.4 |
HIGH
Local |
microsoft |
365_apps office office_long_term_servicing_channel |
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CWE-416
Use After Free |
CVE-2026-40358 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1964 | 7.8 |
HIGH
Local |
microsoft |
365_apps excel office office_long_term_servicing_channel office_online_server |
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CWE-416
Use After Free |
CVE-2026-40359 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1965 | 7.8 |
HIGH
Local |
microsoft |
365_apps excel office office_long_term_servicing_channel office_online_server |
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CWE-125
Out-of-bounds Read |
CVE-2026-40360 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1966 | 8.4 |
HIGH
Local |
microsoft |
365_apps office office_long_term_servicing_channel word |
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CWE-416
Use After Free |
CVE-2026-40361 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1967 | 7.8 |
HIGH
Local |
microsoft |
365_apps excel office office_long_term_servicing_channel office_online_server |
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-40362 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1968 | 8.4 |
HIGH
Local |
microsoft |
365_apps office office_long_term_servicing_channel |
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-40363 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1969 | 8.4 |
HIGH
Local |
microsoft |
365_apps office office_long_term_servicing_channel word |
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CWE-122 CWE-843 CWE-908 Heap-based Buffer Overflow Type Confusion Use of Uninitialized Resource |
CVE-2026-40364 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 1970 | 8.4 |
HIGH
Local |
microsoft |
365_apps office office_long_term_servicing_channel word |
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CWE-416
Use After Free |
CVE-2026-40366 | 2026-05-20 03:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |