Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2781	4.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows 回復環境のセキュリティ機能バイパスの脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-20928	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

2782	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 10 1809 Microsoft Windows 10 22h2 Microsoft Wind…	Windows Management サービスの特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-20930	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

2783	6	警告 Local	オラクル	JDK JRE Oracle GraalVM	オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22003	2026-04-27 11:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

2784	3.7	低 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-22746	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2785	8.1	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるホストの不一致による証明書の検証に関する脆弱性	CWE-297 ホストの不一致による証明書の不適切な検証	CVE-2026-22747	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2786	6.5	警告 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-22748	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2787	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-22753	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2788	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-22754	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2789	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23344	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2790	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23345	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346731	-	pico_server	pico_server	Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.	NVD-CWE-Other	CVE-2005-1367	2016-10-18 12:19	2005-05-16	Show	GitHub Exploit DB Packet Storm

346732	-	mandrakesoft	mandrake_lam-runtime	The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2005-1379	2016-10-18 12:19	2005-05-3	Show	GitHub Exploit DB Packet Storm

346733	-	apple	safari	Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.	NVD-CWE-Other	CVE-2005-1385	2016-10-18 12:19	2005-05-3	Show	GitHub Exploit DB Packet Storm

346734	-	francisco_burzi	php-nuke	PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php…	NVD-CWE-Other	CVE-2005-1386	2016-10-18 12:19	2005-05-3	Show	GitHub Exploit DB Packet Storm

346735	-	kristofer_szymanski	cocktail	Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing …	NVD-CWE-Other	CVE-2005-1387	2016-10-18 12:19	2005-05-3	Show	GitHub Exploit DB Packet Storm

346736	-	esri	arcinfo_workstation	Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or…	NVD-CWE-Other	CVE-2005-1393	2016-10-18 12:19	2005-05-3	Show	GitHub Exploit DB Packet Storm

346737	-	rsa	securid_web_agent	Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.	NVD-CWE-Other	CVE-2005-1471	2016-10-18 12:19	2005-05-6	Show	GitHub Exploit DB Packet Storm

346738	-	oracle	database_server	SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAM…	NVD-CWE-Other	CVE-2005-1197	2016-10-18 12:18	2005-05-2	Show	GitHub Exploit DB Packet Storm

346739	-	anaconda_partners	foundation_directory	Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters (%00) in the middle of ".." sequences …	NVD-CWE-Other	CVE-2005-1198	2016-10-18 12:18	2005-05-2	Show	GitHub Exploit DB Packet Storm

346740	-	infopop	ultimate_bulletin_board	SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter.	NVD-CWE-Other	CVE-2005-1199	2016-10-18 12:18	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed