Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4131 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Server Update Services (WSUS) の特権の昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26174 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4132 4.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows ブート マネージャーのセキュリティ機能のバイパスの脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-26175 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4133 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows クライアント側のキャッシュ ドライバー (csc.sys) の特権昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-26176 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4134 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-26177 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4135 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Advanced Rasterization Platform の特権昇格の脆弱性 CWE-190
CWE-681
CVE-2026-26178 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4136 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows カーネルの特権の昇格の脆弱性 CWE-415
二重解放 		CVE-2026-26179 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4137 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows カーネルの特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-26180 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4138 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		Microsoft Resilient File System の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26181 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4139 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-26182 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4140 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso… 		リモート アクセス管理サービス/API (RPC サーバー) の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-26183 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1271 7.3 HIGH
Network 		- - A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by this vulnerability is an unknown functionality of the file /api/Dinner/PayConfig. … New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9544 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1272 6.3 MEDIUM
Network 		- - A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executing a manipulation of the argument email_i… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9542 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1273 5.3 MEDIUM
Network 		- - A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to denial of service. I… New CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-9540 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1274 5.3 MEDIUM
Local 		- - A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgread Utility. Performing a manipul… New CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow 		CVE-2026-9500 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1275 7.5 HIGH
Network 		- - Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSp… New CWE-1333
CWE-400
 Inefficient Regular Expression Complexity
 Uncontrolled Resource Consumption 		CVE-2026-9496 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1276 7.3 HIGH
Network 		- - Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silently dropped from the execution chain when the router prefix … New CWE-284
Improper Access Control 		CVE-2026-9495 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1277 5.7 MEDIUM
Network 		- - Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF). This issue affects Zoho Mail wordpress plugin versions before 1.6.2. New CWE-352
 Origin Validation Error 		CVE-2026-8174 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1278 - - - A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious user with local access can exploit this vulnerability using a specially crafted… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-7310 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1279 5.9 MEDIUM
Network 		- - Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing … Update CWE-295
Improper Certificate Validation  		CVE-2026-48249 2026-05-26 23:16 2026-05-22 Show GitHub Exploit DB Packet Storm
1280 5.9 MEDIUM
Network 		- - Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound H… Update CWE-295
Improper Certificate Validation  		CVE-2026-48248 2026-05-26 23:16 2026-05-22 Show GitHub Exploit DB Packet Storm