Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3781	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2025 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microso…	リモートアクセス管理サービス/API (RPC サーバー) の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-26183	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

3782	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 1809 Microsoft Wind…	Windows Projected File System の特権の昇格の脆弱性	CWE-126 バッファオーバーリード	CVE-2026-26184	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

3783	4.4	警告 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 22h2 Microsoft Windows 10 21h2 Microsoft Windows&…	Windows Hello のセキュリティ機能のバイパスの脆弱性	CWE-20 不適切な入力確認	CVE-2026-27906	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

3784	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-30997	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

3785	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-30998	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

3786	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-30999	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

3787	8.8	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性	CWE-284 CWE-94	CVE-2026-31018	2026-04-27 11:23	2026-04-21	Show	GitHub Exploit DB Packet Storm

3788	8.8	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-31019	2026-04-27 11:22	2026-04-21	Show	GitHub Exploit DB Packet Storm

3789	3.5	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-3254	2026-04-27 11:22	2026-04-22	Show	GitHub Exploit DB Packet Storm

3790	9.9	緊急 Network	Linux Foundation	Spinnaker	Linux FoundationのSpinnakerにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-32604	2026-04-27 11:22	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352951	-	hp	jetdirect	HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.	NVD-CWE-Other	CVE-2002-1048	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352952	-	hylafax	hylafax	Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.	NVD-CWE-Other	CVE-2002-1049	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352953	-	hylafax	hylafax	Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.	NVD-CWE-Other	CVE-2002-1050	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352954	-	w3c	jigsaw	Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed…	NVD-CWE-Other	CVE-2002-1053	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352955	-	brother	nc-3100h	Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password.	NVD-CWE-Other	CVE-2002-1055	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352956	-	smartmax_software	mailmax	Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.	NVD-CWE-Other	CVE-2002-1057	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352957	-	cobalt	qube	Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cook…	NVD-CWE-Other	CVE-2002-1058	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352958	-	bluecoat	cacheos	Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers…	NVD-CWE-Other	CVE-2002-1060	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352959	-	t._hauck	jana_web_server	Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP…	NVD-CWE-Other	CVE-2002-1061	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352960	-	t._hauck	jana_web_server	Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.	NVD-CWE-Other	CVE-2002-1062	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed