Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250391	6.4	警告	Piwik	-	Piwik の Piwik_Common::getIP 関数における位置情報取得とロギング機能を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0398	2012-03-27 18:42	2011-01-10	Show	GitHub Exploit DB Packet Storm

250392	9.3	危険	マイクロソフト	-	Windows XP の Microsoft Internet Explorer における不正な GUI 表示を誘発される脆弱性	CWE-Other その他	CVE-2011-0347	2012-03-27 18:42	2011-01-7	Show	GitHub Exploit DB Packet Storm

250393	3.3	注意	Alcatel-Lucent	-	Alcatel-Lucent OmniVista の NMS サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0345	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250394	5.8	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniPCX Enterprise の CGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0344	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250395	6.9	警告	balabit	-	Balabit syslog-ng におけるログファイルを読み書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0343	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

250396	10	危険	Schneider Electric	-	InduSoft Web Studio の InduSoft ISSymbol ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0342	2012-03-27 18:42	2011-09-2	Show	GitHub Exploit DB Packet Storm

250397	9.3	危険	Artifex Software	-	MuPDF プラグインの pdfmoz_onmouse 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0341	2012-03-27 18:42	2011-05-13	Show	GitHub Exploit DB Packet Storm

250398	9.3	危険	Foxit Software Inc	-	Foxit Reader における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0332	2012-03-27 18:42	2011-02-25	Show	GitHub Exploit DB Packet Storm

250399	9.3	危険	Honeywell International Inc.	-	Honeywell ScanServer ActiveX コントロールの addOSPLext メソッドにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0331	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

250400	5	警告	デル	-	DellSystemLite.ocx の Dell DellSystemLite.Scanner ActiveX コントロールにおける任意の WQL 文を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0330	2012-03-27 18:42	2011-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3111	7.8	HIGH Local	microsoft	windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2022_…	Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.	CWE-843 Type Confusion	CVE-2026-35417	2026-05-15 00:54	2026-05-13	Show	GitHub Exploit DB Packet Storm

3112	5.5	MEDIUM Local	m2team	nanazip	NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an uncontrolled recursion vulnerability exists in the UFS/UFS2 filesystem image parser in NanaZip. The function GetAllPat…	CWE-674 Uncontrolled Recursion	CVE-2026-42445	2026-05-15 00:54	2026-05-13	Show	GitHub Exploit DB Packet Storm

3113	7.0	HIGH Local	microsoft	windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2022_…	Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.	CWE-367 CWE-416 Time-of-check Time-of-use (TOCTOU) Race Condition Use After Free	CVE-2026-35418	2026-05-15 00:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

3114	-		-	-	Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidenti…	CWE-306 Missing Authentication for Critical Function	CVE-2025-62619	2026-05-15 00:53	2026-05-15	Show	GitHub Exploit DB Packet Storm

3115	-		-	-	Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resource…	CWE-269 Improper Privilege Management	CVE-2025-62625	2026-05-15 00:53	2026-05-15	Show	GitHub Exploit DB Packet Storm

3116	-		-	-	Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.	CWE-427 Uncontrolled Search Path Element	CVE-2025-62628	2026-05-15 00:53	2026-05-15	Show	GitHub Exploit DB Packet Storm

3117	5.5	MEDIUM Local	microsoft	windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025	Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.	CWE-125 Out-of-bounds Read	CVE-2026-35419	2026-05-15 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

3118	7.1	HIGH Local	m2team	nanazip	NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a stack-based out-of-bounds read exists in the ZealFS filesystem image parser in NanaZip. The vulnerability is triggered …	CWE-125 Out-of-bounds Read	CVE-2026-42446	2026-05-15 00:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

3119	7.1	HIGH Network	m2team	nanazip	NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a one-byte heap out-of-bounds null write exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is …	CWE-787 Out-of-bounds Write	CVE-2026-44215	2026-05-15 00:48	2026-05-13	Show	GitHub Exploit DB Packet Storm

3120	8.8	HIGH Adjacent	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.	CWE-122 Heap-based Buffer Overflow	CVE-2026-34329	2026-05-15 00:43	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed