Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224771 4.3 警告 realm project - Realm CMS の _db/compact.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2680 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
224772 7.5 危険 realm project - Realm CMS の _includes/inc_routines.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2679 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
224773 7.5 危険 telephone - Telephone Directory 2008 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2678 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
224774 4.3 警告 telephone - Telephone Directory 2008 の edit1.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2677 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
224775 4.3 警告 softcomplex - PHP Image Gallery の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2675 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
224776 7.5 危険 Powie - Powie pNews の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2673 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
224777 7.5 危険 y-blog - yBlog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2669 2012-12-20 18:52 2008-06-11 Show GitHub Exploit DB Packet Storm
224778 4.3 警告 y-blog - yBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2668 2012-12-20 18:52 2008-06-11 Show GitHub Exploit DB Packet Storm
224779 7.5 危険 smeweb - SMEWeb の catalog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2652 2012-12-20 18:52 2008-06-10 Show GitHub Exploit DB Packet Storm
224780 4.3 警告 smeweb - SMEWeb における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2644 2012-12-20 18:52 2008-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2111 8.7 HIGH
Network 		- - Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network. CWE-20
 Improper Input Validation  		CVE-2026-27928 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2112 7.0 HIGH
Local 		- - Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-27929 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2113 5.5 MEDIUM
Local 		- - Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. CWE-125
Out-of-bounds Read 		CVE-2026-27930 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2114 5.5 MEDIUM
Local 		- - Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. CWE-125
Out-of-bounds Read 		CVE-2026-27931 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2115 7.0 HIGH
Local 		- - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. CWE-362
Race Condition 		CVE-2026-32068 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2116 7.8 HIGH
Local 		- - Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. CWE-415
 Double Free 		CVE-2026-32069 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2117 7.0 HIGH
Local 		- - Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-32070 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2118 7.5 HIGH
Network 		- - Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. CWE-476
 NULL Pointer Dereference 		CVE-2026-32071 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2119 6.2 MEDIUM
Local 		- - Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally. CWE-287
Improper Authentication 		CVE-2026-32072 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2120 7.0 HIGH
Local 		- - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-32073 2026-04-18 00:10 2026-04-15 Show GitHub Exploit DB Packet Storm