Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241701 3.7 注意 オラクル - Oracle SPARC T シリーズサーバのファームウェアにおける Integrated Lights Out Manager の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3128 2012-07-20 16:13 2012-07-17 Show GitHub Exploit DB Packet Storm
241702 5.4 警告 オラクル - Oracle Solaris における SCTP の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3127 2012-07-20 16:11 2012-07-17 Show GitHub Exploit DB Packet Storm
241703 6.2 警告 オラクル - Oracle Solaris Cluster における Apache Tomcat Agent の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3126 2012-07-20 16:10 2012-07-17 Show GitHub Exploit DB Packet Storm
241704 7.1 危険 オラクル - Oracle Solaris における TCP/IP の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3125 2012-07-20 16:09 2012-07-17 Show GitHub Exploit DB Packet Storm
241705 5 警告 オラクル - Oracle Solaris における Kernel/KSSL の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3124 2012-07-20 16:07 2012-07-17 Show GitHub Exploit DB Packet Storm
241706 5 警告 オラクル - Oracle Solaris における Apache HTTP サーバの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3123 2012-07-20 16:06 2012-07-17 Show GitHub Exploit DB Packet Storm
241707 2.6 注意 オラクル - Oracle Solaris におけるソートの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3122 2012-07-20 16:05 2012-07-17 Show GitHub Exploit DB Packet Storm
241708 5 警告 オラクル - Oracle Solaris における in.tnamed の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3121 2012-07-20 16:04 2012-07-17 Show GitHub Exploit DB Packet Storm
241709 7.8 危険 オラクル - Oracle Solaris における TCP/IP の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3120 2012-07-20 16:02 2012-07-17 Show GitHub Exploit DB Packet Storm
241710 4.3 警告 オラクル - Oracle Solaris における Solaris 管理コンソールの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3112 2012-07-20 16:01 2012-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1481 7.8 HIGH
Local
microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_…
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. CWE-843
Type Confusion
CVE-2026-35417 2026-05-15 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
1482 5.5 MEDIUM
Local
m2team nanazip NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an uncontrolled recursion vulnerability exists in the UFS/UFS2 filesystem image parser in NanaZip. The function GetAllPat… CWE-674
 Uncontrolled Recursion
CVE-2026-42445 2026-05-15 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
1483 7.0 HIGH
Local
microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_…
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CWE-367
CWE-416
 Time-of-check Time-of-use (TOCTOU) Race Condition
 Use After Free
CVE-2026-35418 2026-05-15 00:53 2026-05-13 Show GitHub Exploit DB Packet Storm
1484 - - - Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidenti… CWE-306
Missing Authentication for Critical Function
CVE-2025-62619 2026-05-15 00:53 2026-05-15 Show GitHub Exploit DB Packet Storm
1485 - - - Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resource… CWE-269
 Improper Privilege Management
CVE-2025-62625 2026-05-15 00:53 2026-05-15 Show GitHub Exploit DB Packet Storm
1486 - - - Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution. CWE-427
 Uncontrolled Search Path Element
CVE-2025-62628 2026-05-15 00:53 2026-05-15 Show GitHub Exploit DB Packet Storm
1487 5.5 MEDIUM
Local
microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. CWE-125
Out-of-bounds Read
CVE-2026-35419 2026-05-15 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1488 7.1 HIGH
Local
m2team nanazip NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a stack-based out-of-bounds read exists in the ZealFS filesystem image parser in NanaZip. The vulnerability is triggered … CWE-125
Out-of-bounds Read
CVE-2026-42446 2026-05-15 00:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1489 7.1 HIGH
Network
m2team nanazip NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a one-byte heap out-of-bounds null write exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is … CWE-787
 Out-of-bounds Write
CVE-2026-44215 2026-05-15 00:48 2026-05-13 Show GitHub Exploit DB Packet Storm
1490 8.8 HIGH
Adjacent
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network. CWE-122
Heap-based Buffer Overflow
CVE-2026-34329 2026-05-15 00:43 2026-05-13 Show GitHub Exploit DB Packet Storm