Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
401 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 New CWE-362
CWE-416
CVE-2026-26168 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
402 6.1 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows カーネル メモリの情報漏えいの脆弱性 New CWE-126
バッファオーバーリード
CVE-2026-26169 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
403 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
PowerShell の特権の昇格の脆弱性 New CWE-20
不適切な入力確認
CVE-2026-26170 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
404 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows&…
Windows プッシュ通知の特権昇格の脆弱性 New CWE-362
CWE-416
CVE-2026-26172 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
405 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 New CWE-362
CWE-416
CWE-476
CVE-2026-26173 2026-04-27 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
406 8.2 重要
Network
FirebirdSQL Firebird FirebirdSQLのFirebirdにおける複数の脆弱性 New CWE-119
CWE-787
CVE-2026-27890 2026-04-27 10:51 2026-04-17 Show GitHub Exploit DB Packet Storm
407 7.5 重要
Network
FirebirdSQL Firebird FirebirdSQLのFirebirdにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-28212 2026-04-27 10:51 2026-04-17 Show GitHub Exploit DB Packet Storm
408 6.5 警告
Network
FirebirdSQL Firebird FirebirdSQLのFirebirdにおける複数の脆弱性 New CWE-190
CWE-835
CVE-2026-28214 2026-04-27 10:51 2026-04-17 Show GitHub Exploit DB Packet Storm
409 8.2 重要
Network
FirebirdSQL Firebird FirebirdSQLのFirebirdにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-28224 2026-04-27 10:51 2026-04-17 Show GitHub Exploit DB Packet Storm
410 6.5 警告
Network
TOTOLINK a3300r ファームウェア TOTOLINKのa3300r ファームウェアにおけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-31159 2026-04-27 10:51 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348331 - freebsd freebsd Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute comman… NVD-CWE-Other
CVE-2002-0755 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348332 - usermin
webmin
usermin
webmin
Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies. NVD-CWE-Other
CVE-2002-0756 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348333 - usermin
webmin
usermin
webmin
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authen… NVD-CWE-Other
CVE-2002-0757 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348334 - bzip bzip2 bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the u… NVD-CWE-Other
CVE-2002-0759 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348335 - bzip bzip2 Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the p… NVD-CWE-Other
CVE-2002-0760 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348336 - bzip bzip2 bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could … NVD-CWE-Other
CVE-2002-0761 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348337 - hp virtualvault Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the… NVD-CWE-Other
CVE-2002-0763 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348338 - phorum phorum Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a … NVD-CWE-Other
CVE-2002-0764 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348339 - richard_gooch simpleinit simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with roo… NVD-CWE-Other
CVE-2002-0767 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348340 - luke_mewburn
suse
lukemftp
suse_linux
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command. NVD-CWE-Other
CVE-2002-0768 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm