Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3741 8.4 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows COM の特権の昇格の脆弱性 CWE-349
信頼できるデータ受け入れ時の信頼できない無関係なデータの受け入れ
CVE-2026-32162 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
3742 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows ユーザー インターフェイス コアの特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-32163 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
3743 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows ユーザー インターフェイス コアの特権昇格の脆弱性 CWE-362
競合状態
CVE-2026-32164 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
3744 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows ユーザー インターフェイス コアの特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-32165 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
3745 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows&…
接続ユーザー エクスペリエンスとテレメトリ サービスのサービス拒否の脆弱性 CWE-269
不適切な権限管理
CVE-2026-32181 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
3746 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows Snipping Tool のリモートでコードが実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2026-32183 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
3747 7 重要
Local
マイクロソフト Microsoft Windows 11 26h1 Windows カーネルの特権の昇格の脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-32195 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
3748 4.3 警告
Network
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows シェルのスプーフィングの脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-32202 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
3749 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
ユニバーサル プラグ アンド プレイ (upnp.dll) の情報漏えいの脆弱性 CWE-269
CWE-59
CVE-2026-32212 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
3750 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
ユニバーサル プラグ アンド プレイ (upnp.dll) の情報漏えいの脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-32214 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
781 5.1 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details,… New CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-62308 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
782 2.6 LOW
Adjacent
- - HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to… New CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-62309 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
783 5.4 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized … New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2025-62310 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
784 4.3 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized a… New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2025-62311 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
785 3.0 LOW
Adjacent
- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… New CWE-522
 Insufficiently Protected Credentials
CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
786 5.4 MEDIUM
Adjacent
- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … New CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
787 2.3 LOW
Adjacent
- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… New CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
788 2.6 LOW
Adjacent
- - HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst… New CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2025-62317 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
789 7.5 HIGH
Network
libexpat_project libexpat In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. Update CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-45186 2026-05-15 02:20 2026-05-10 Show GitHub Exploit DB Packet Storm
790 5.4 MEDIUM
Network
- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low … New CWE-779
 Logging of Excessive Data
CVE-2026-20209 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm