Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
238561	7.1	危険	マイクロソフト	-	Microsoft Windows 2000 の CryptGenRandom 関数における暗号化のメカニズムの効果を減少される脆弱性	CWE-200 情報漏えい	CVE-2007-6043	2012-09-25 16:59	2007-11-20	Show	GitHub Exploit DB Packet Storm

238562	2.1	注意	The PHP Group	-	PHP におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6039	2012-09-25 16:59	2007-11-20	Show	GitHub Exploit DB Packet Storm

238563	6.8	警告	joomlaequipment	-	Joomla! 用の Juser における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-6038	2012-09-25 16:59	2007-11-20	Show	GitHub Exploit DB Packet Storm

238564	7.1	危険	live555	-	LIVE555 Media Server の parseRTSPRequestString 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6036	2012-09-25 16:59	2007-11-20	Show	GitHub Exploit DB Packet Storm

238565	5.8	警告	Horde	-	IMP Webmail Client などにおける任意の電子メールメッセージを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-6018	2012-09-25 16:59	2008-01-10	Show	GitHub Exploit DB Packet Storm

238566	6.8	警告	justjoomla	-	Joomla! 用の jjgallery コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-6027	2012-09-25 16:59	2007-11-19	Show	GitHub Exploit DB Packet Storm

238567	5	警告	KDE project	-	KDE Konqueror におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2007-6000	2012-09-25 16:59	2007-11-15	Show	GitHub Exploit DB Packet Storm

238568	7.8	危険	justin hagstrom	-	Justin Hagstrom AutoIndex PHP Scrpit の classes/Url.php におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-5984	2012-09-25 16:59	2007-11-14	Show	GitHub Exploit DB Packet Storm

238569	4.3	警告	justin hagstrom	-	Justin Hagstrom AutoIndex PHP Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5983	2012-09-25 16:59	2007-11-14	Show	GitHub Exploit DB Packet Storm

238570	3.3	注意	Lantronix, Inc.	-	Lantronix SCS3200 におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2007-5981	2012-09-25 16:59	2007-11-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2591	5.6	MEDIUM Network	dell	elastic_cloud_storage objectscale	Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthentica…	CWE-302 Authentication Bypass by Assumed-Immutable Data	CVE-2025-43992	2026-05-16 11:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

2592	8.8	HIGH Network	google	chrome	Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)	CWE-416 Use After Free	CVE-2026-8581	2026-05-16 11:48	2026-05-15	Show	GitHub Exploit DB Packet Storm

2593	3.5	LOW Network	-	-	The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.9, OCI ownership validation skips label-match check when upstream OCI registry return…	CWE-636 Not Failing Securely ('Failing Open')	CVE-2026-45781	2026-05-16 11:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

2594	5.5	MEDIUM Local	microsoft	word	Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.	CWE-284 NVD-CWE-noinfo Improper Access Control	CVE-2026-41101	2026-05-16 11:09	2026-05-13	Show	GitHub Exploit DB Packet Storm

2595	5.5	MEDIUM Local	microsoft	powerpoint	Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.	CWE-284 Improper Access Control	CVE-2026-41102	2026-05-16 11:08	2026-05-13	Show	GitHub Exploit DB Packet Storm

2596	9.1	CRITICAL Network	microsoft	confluence_saml_sso jira_saml_sso	Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.	CWE-303 NVD-CWE-Other Incorrect Implementation of Authentication Algorithm	CVE-2026-41103	2026-05-16 11:07	2026-05-13	Show	GitHub Exploit DB Packet Storm

2597	5.5	MEDIUM Local	fortinet	forticlient	A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert at…	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-44278	2026-05-16 10:59	2026-05-13	Show	GitHub Exploit DB Packet Storm

2598	5.5	MEDIUM Local	fortinet	fortitoken_mobile	A improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow atta…	CWE-926 Improper Export of Android Application Components	CVE-2026-44279	2026-05-16 10:57	2026-05-13	Show	GitHub Exploit DB Packet Storm

2599	4.4	MEDIUM Local	microsoft	365_copilot	Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.	CWE-284 NVD-CWE-Other Improper Access Control	CVE-2026-41100	2026-05-16 10:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

2600	8.8	HIGH Network	microsoft	data_formulator	Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.	CWE-94 Code Injection	CVE-2026-41094	2026-05-16 10:47	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed