Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4101 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows UPnP Device Host の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32075 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4102 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows 記憶域スペース コントローラーの特権昇格の脆弱性 CWE-125
境界外読み取り 		CVE-2026-32076 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4103 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows UPnP Device Host の特権の昇格の脆弱性 CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-32077 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4104 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows Projected File System の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32078 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4105 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Web アカウント マネージャーの情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-32079 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4106 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2025
Microsoft Windows Server 2016 		Windows WalletService の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32080 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4107 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		パッケージ カタログの情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-32081 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4108 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Simple Search Discovery Protocol (SSDP) サービスの特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-32082 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4109 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Simple Search Discovery Protocol (SSDP) サービスの特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-32083 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
4110 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows 印刷スプーラーの情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-32084 2026-04-23 10:14 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348221 - apple itunes Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2005-2938 2011-03-10 14:00 2005-11-18 Show GitHub Exploit DB Packet Storm
348222 - django_project django The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to con… CWE-352
 Origin Validation Error 		CVE-2008-3909 2011-03-8 12:11 2008-09-5 Show GitHub Exploit DB Packet Storm
348223 - cchost cchost SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID. NOTE: Some… NVD-CWE-Other
CVE-2006-4778 2011-03-8 11:42 2006-09-14 Show GitHub Exploit DB Packet Storm
348224 - roxio toast Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are execu… CWE-362
Race Condition 		CVE-2006-4801 2011-03-8 11:42 2006-09-15 Show GitHub Exploit DB Packet Storm
348225 - iodine iodine Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to "potential security problems." NVD-CWE-Other
CVE-2006-4831 2011-03-8 11:42 2006-09-16 Show GitHub Exploit DB Packet Storm
348226 - iodine iodine This vulnerability is addressed in the following product release: Iodine, Iodine, 0.3.2 NVD-CWE-Other
CVE-2006-4831 2011-03-8 11:42 2006-09-16 Show GitHub Exploit DB Packet Storm
348227 - joomla joomla Unspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is set, allows attackers to perform the emailform and emailsend tasks. NVD-CWE-Other
CVE-2006-4473 2011-03-8 11:41 2006-09-1 Show GitHub Exploit DB Packet Storm
348228 - joomla joomla Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-4475 2011-03-8 11:41 2006-09-1 Show GitHub Exploit DB Packet Storm
348229 - joomla joomla Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of requir… CWE-94
CWE-264
Code Injection
Permissions, Privileges, and Access Controls 		CVE-2006-4476 2011-03-8 11:41 2006-09-1 Show GitHub Exploit DB Packet Storm
348230 - ibm aix Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors. NVD-CWE-Other
CVE-2006-4522 2011-03-8 11:41 2006-09-2 Show GitHub Exploit DB Packet Storm