Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3551 9.8 緊急
Network 		マイクロソフト Azure Logic Apps Azure Logic Apps Elevation of Privilege Vulnerability CWE-22
パス・トラバーサル 		CVE-2026-21227 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
3552 6.1 警告
Network 		マイクロソフト Microsoft Account Microsoft Account Spoofing Vulnerability CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21264 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
3553 7.4 重要
Network 		マイクロソフト Azure Data Explorer Azure Data Explorer Information Disclosure Vulnerability CWE-200
情報漏えい 		CVE-2026-21524 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
3554 6.1 警告
Network 		Aquq Platform Revive Adserver Aquq PlatformのRevive Adserverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21663 2026-02-5 15:44 2026-01-20 Show GitHub Exploit DB Packet Storm
3555 6.1 警告
Network 		Aquq Platform Revive Adserver Aquq PlatformのRevive Adserverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21664 2026-02-5 15:44 2026-01-20 Show GitHub Exploit DB Packet Storm
3556 9.8 緊急
Network 		Anysphere Cursor AnysphereのCursorにおける複数の脆弱性 CWE-15
CWE-269
CWE-74
CWE-77
CWE-77
CWE-78
CWE-94
CVE-2026-22708 2026-02-5 15:44 2026-01-14 Show GitHub Exploit DB Packet Storm
3557 6.1 警告
Local 		openCryptoki Project openCryptoki openCryptoki ProjectのopenCryptokiにおけるバッファサイズの計算の誤りに関する脆弱性 CWE-131
正しくないバッファサイズ計算 		CVE-2026-22791 2026-02-5 15:44 2026-01-13 Show GitHub Exploit DB Packet Storm
3558 9.8 緊急
Network 		cal cal.com calのcal.comにおける複数の脆弱性 CWE-602
CWE-639
CVE-2026-23478 2026-02-5 15:44 2026-01-13 Show GitHub Exploit DB Packet Storm
3559 7.8 重要
Local 		- sumatrapdfreaderのSumatra PDFにおける信頼できない検索パスに関する脆弱性 Fix CWE-426 Untrusted Search Path for notepad.exe  sumatrapdfreader/sumatrapdf@2762e02  GitHub
CWE-426
CVE-2026-23512 2026-02-5 15:44 2026-01-14 Show GitHub Exploit DB Packet Storm
3560 6.1 警告
Network 		Lee Peuker Movary Lee PeukerのMovaryにおける複数の脆弱性 CWE-20
CWE-79
CVE-2026-23839 2026-02-5 15:44 2026-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348201 - atrium_software mercur_imap4_server
mercur_mailserver
mercur_pop3_server 		Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service. NVD-CWE-Other
CVE-2000-0198 2008-09-11 04:03 2000-03-15 Show GitHub Exploit DB Packet Storm
348202 - microsoft sql_server When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak enc… NVD-CWE-Other
CVE-2000-0199 2008-09-11 04:03 2000-03-14 Show GitHub Exploit DB Packet Storm
348203 - oracle oracle8i The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges. NVD-CWE-Other
CVE-2000-0206 2008-09-11 04:03 2000-03-5 Show GitHub Exploit DB Packet Storm
348204 - sgi infosearch
irix 		SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters. NVD-CWE-Other
CVE-2000-0207 2008-09-11 04:03 2000-03-1 Show GitHub Exploit DB Packet Storm
348205 - htdig htdig The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch. NVD-CWE-Other
CVE-2000-0208 2008-09-11 04:03 2000-02-29 Show GitHub Exploit DB Packet Storm
348206 - university_of_kansas lynx Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page. NVD-CWE-Other
CVE-2000-0209 2008-09-11 04:03 2000-02-27 Show GitHub Exploit DB Packet Storm
348207 - sun workshop The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. NVD-CWE-Other
CVE-2000-0210 2008-09-11 04:03 2000-02-21 Show GitHub Exploit DB Packet Storm
348208 - sco unixware Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges. NVD-CWE-Other
CVE-2000-0215 2008-09-11 04:03 2000-02-8 Show GitHub Exploit DB Packet Storm
348209 - microsoft exchange_server
outlook
windows_messaging 		Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with response… NVD-CWE-Other
CVE-2000-0216 2008-09-11 04:03 2000-02-29 Show GitHub Exploit DB Packet Storm
348210 - openbsd
ssh 		openssh
ssh
ssh2 		The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. NVD-CWE-Other
CVE-2000-0217 2008-09-11 04:03 2000-02-24 Show GitHub Exploit DB Packet Storm