Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253331 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1226 2011-05-9 12:02 2011-04-12 Show GitHub Exploit DB Packet Storm
253332 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1225 2011-05-9 12:01 2011-04-12 Show GitHub Exploit DB Packet Storm
253333 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0677 2011-05-9 11:59 2011-04-12 Show GitHub Exploit DB Packet Storm
253334 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0676 2011-05-9 11:57 2011-04-12 Show GitHub Exploit DB Packet Storm
253335 7.2 危険 マイクロソフト - Microsoft Windows XP の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0673 2011-05-9 11:56 2011-04-12 Show GitHub Exploit DB Packet Storm
253336 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1242 2011-05-9 11:55 2011-04-12 Show GitHub Exploit DB Packet Storm
253337 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1241 2011-05-9 11:53 2011-04-12 Show GitHub Exploit DB Packet Storm
253338 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1240 2011-05-9 11:52 2011-04-12 Show GitHub Exploit DB Packet Storm
253339 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1239 2011-05-9 11:51 2011-04-12 Show GitHub Exploit DB Packet Storm
253340 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1238 2011-05-9 11:50 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5071 6.5 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level privileges to retrieve sensitive … CWE-862
 Missing Authorization 		CVE-2026-41464 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5072 6.5 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contains a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequ… CWE-22
Path Traversal 		CVE-2026-41465 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5073 5.4 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to properly sanitize user input by only d… CWE-79
Cross-site Scripting 		CVE-2026-41466 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5074 5.4 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName() function fails to restrict HTML and HTM file … CWE-79
Cross-site Scripting 		CVE-2026-41467 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5075 - - - authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either bec… CWE-842
 Placement of User into Incorrect Group 		CVE-2026-6970 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5076 9.8 CRITICAL
Network 		- - A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a man… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7136 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5077 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipula… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7137 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5078 9.8 CRITICAL
Network 		- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7138 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5079 4.3 MEDIUM
Network 		- - An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL. CWE-601
Open Redirect 		CVE-2026-30346 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5080 4.3 MEDIUM
Network 		- - A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal. CWE-22
Path Traversal 		CVE-2026-30462 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm