Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4491 7.8 重要
Local
マイクロソフト Azure Monitor Agent Azure Monitor エージェントの特権昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2026-32168 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4492 7.8 重要
Local
マイクロソフト Azure Monitor Agent Azure Monitor エージェントの特権昇格の脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-32192 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4493 5.9 警告
Network
マイクロソフト Microsoft .NET Framework .NET Framework のサービス拒否の脆弱性 CWE-362
競合状態
CVE-2026-32226 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4494 8.8 重要
Network
Kubernetes ingress-nginx Kubernetesのingress-nginxにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-3288 2026-05-8 12:23 2026-03-9 Show GitHub Exploit DB Packet Storm
4495 7.5 重要
Network
マイクロソフト Microsoft .NET Framework
.NET
.NET、.NET Framework、Visual Studio のサービス拒否の脆弱性 CWE-20
CWE-400
CWE-835
CVE-2026-33116 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4496 8.8 重要
Network
マイクロソフト SQL Server 2016
SQL Server 2017
SQL Server 2022
SQL Server 2019
SQL Server 2025
Microsoft SQL Server のリモート コードが実行される脆弱性 CWE-822
信頼性のないポインタデリファレンス
CVE-2026-33120 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4497 5.9 警告
Network
Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおける複数の脆弱性 CWE-295
CWE-297
CVE-2026-34477 2026-05-8 12:23 2026-04-10 Show GitHub Exploit DB Packet Storm
4498 7.5 重要
Network
Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ
CVE-2026-34479 2026-05-8 12:23 2026-04-10 Show GitHub Exploit DB Packet Storm
4499 7.4 重要
Network
GNU Project
レッドハット
Red Hat Hardened Images
Red Hat Enterprise Linux
Red Hat OpenShift Container Platform
GnuTLS
GNU Project等の複数ベンダの製品における大文字と小文字の区別の不適切な処理に関する脆弱性 CWE-178
大文字と小文字の区別の不適切な処理
CVE-2026-3833 2026-05-8 12:23 2026-04-30 Show GitHub Exploit DB Packet Storm
4500 9.1 緊急
Network
Apache Software Foundation Apache Wicket Apache Software FoundationのApache Wicketにおけるセッションの固定化の脆弱性 CWE-384
CWE-384
CVE-2026-40010 2026-05-8 12:23 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346191 - att winvnc WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwo… NVD-CWE-Other
CVE-2000-1164 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346192 - balabit syslog-ng Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier. NVD-CWE-Other
CVE-2000-1165 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346193 - twig_development_team twig Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhost… NVD-CWE-Other
CVE-2000-1166 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346194 - freebsd freebsd ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system. NVD-CWE-Other
CVE-2000-1167 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346195 - openbsd openssh OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to t… NVD-CWE-Other
CVE-2000-1169 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346196 - pelesoft netsnap Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request. NVD-CWE-Other
CVE-2000-1170 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346197 - markus_triska cgiforum Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter. NVD-CWE-Other
CVE-2000-1171 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346198 - ethereal_group ethereal Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username. NVD-CWE-Other
CVE-2000-1174 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346199 - netopia 650-st_isdn_router Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters. NVD-CWE-Other
CVE-2000-1179 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
346200 - realnetworks realserver Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admin/includes/ URL. NVD-CWE-Other
CVE-2000-1181 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm