Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3901 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31606 2026-05-1 10:48 2026-04-24 Show GitHub Exploit DB Packet Storm
3902 9.8 緊急
Network
Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 CWE-415
二重解放
CVE-2026-31608 2026-05-1 10:48 2026-04-24 Show GitHub Exploit DB Packet Storm
3903 7.1 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-31614 2026-05-1 10:48 2026-04-24 Show GitHub Exploit DB Packet Storm
3904 7.5 重要
Network
Tinyproxy project Tinyproxy Tinyproxy projectのTinyproxyにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-31842 2026-05-1 10:48 2026-04-7 Show GitHub Exploit DB Packet Storm
3905 8 重要
Network
マイクロソフト Microsoft Power Apps Microsoft Power Apps のリモートでコードが実行される脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-32172 2026-05-1 10:48 2026-04-23 Show GitHub Exploit DB Packet Storm
3906 7.1 重要
Local
マイクロソフト Microsoft Office
Microsoft Excel
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office Online Server
Microsoft Excel の情報漏えいの脆弱性 CWE-125
境界外読み取り
CVE-2026-32188 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
3907 7.8 重要
Local
マイクロソフト Microsoft Office
Microsoft Excel
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office Online Server
Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32189 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
3908 8.4 重要
Local
マイクロソフト Microsoft 365 Apps
Microsoft Office
Office Long Term Servicing Channel (LTSC)
Microsoft Office のリモート コードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32190 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
3909 7.8 重要
Local
マイクロソフト Microsoft 365 Apps
Office Long Term Servicing Channel (LTSC)
Microsoft Word のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-33095 2026-05-1 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
3910 9.3 緊急
Network
マイクロソフト Microsoft 365 Copilot Microsoft 365 Copilot の特権昇格の脆弱性 CWE-601
オープンリダイレクト
CVE-2026-33102 2026-05-1 10:48 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354201 - intel intel_pro_wireless_2011b_lan_usb_device_driver Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allow… NVD-CWE-Other
CVE-2002-0214 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354202 - steve_kneizys agora.cgi Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an err… NVD-CWE-Other
CVE-2002-0215 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354203 - xoops xoops userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter. NVD-CWE-Other
CVE-2002-0216 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354204 - xoops xoops Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Messa… NVD-CWE-Other
CVE-2002-0217 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354205 - sas sas_base
sas_integration_technologies
Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a … NVD-CWE-Other
CVE-2002-0218 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354206 - sas sas_base
sas_integration_technologies
Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument. NVD-CWE-Other
CVE-2002-0219 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354207 - phpsmssend phpsmssend phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters. NVD-CWE-Other
CVE-2002-0220 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354208 - etype eserv Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from ac… NVD-CWE-Other
CVE-2002-0221 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354209 - etype eserv Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. NVD-CWE-Other
CVE-2002-0222 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
354210 - infopop
wired_community_software
ultimate_bulletin_board
wwwthreads
Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends i… NVD-CWE-Other
CVE-2002-0223 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm