Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3801 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows Sensor Data Service の特権昇格の脆弱性 CWE-20
CWE-822
CVE-2026-26161 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3802 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows OLE の特権の昇格の脆弱性 CWE-843
型の取り違え 		CVE-2026-26162 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3803 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows カーネルの特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-26163 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3804 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows シェルの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-26165 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3805 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows シェルの特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-26166 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3806 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26167 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3807 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26168 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3808 6.1 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows カーネル メモリの情報漏えいの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-26169 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3809 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		PowerShell の特権の昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2026-26170 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
3810 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows&… 		Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26172 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347371 - php_fusion php_fusion Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pas… NVD-CWE-Other
CVE-2005-0829 2016-10-18 12:14 2005-05-2 Show GitHub Exploit DB Packet Storm
347372 - gfi languard_network_security_scanner lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. NVD-CWE-Other
CVE-2005-0604 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
347373 - phpbb_group phpbb sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie. NVD-CWE-Other
CVE-2005-0614 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
347374 - postnuke_software_foundation postnuke Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter. NVD-CWE-Other
CVE-2005-0615 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
347375 - - - Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2)… NVD-CWE-Other
CVE-2005-0616 2016-10-18 12:13 2005-02-28 Show GitHub Exploit DB Packet Storm
347376 - postnuke_software_foundation postnuke SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter. NVD-CWE-Other
CVE-2005-0617 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
347377 - enlight_software scrapland Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) … NVD-CWE-Other
CVE-2005-0621 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
347378 - raidenhttpd raidenhttpd RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space. NVD-CWE-Other
CVE-2005-0622 2016-10-18 12:13 2005-03-1 Show GitHub Exploit DB Packet Storm
347379 - raidenhttpd raidenhttpd Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL. NVD-CWE-Other
CVE-2005-0623 2016-10-18 12:13 2005-03-1 Show GitHub Exploit DB Packet Storm
347380 - demof forumwa Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) sub… NVD-CWE-Other
CVE-2005-0628 2016-10-18 12:13 2005-03-1 Show GitHub Exploit DB Packet Storm