Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4741	8.8	重要 Network	infiniflow	ragflow	infiniflowのragflowにおける複数の脆弱性	CWE-1336 CWE-20 CWE-78 CWE-94	CVE-2026-28797	2026-04-24 11:31	2026-04-3	Show	GitHub Exploit DB Packet Storm

4742	7.1	重要 Network	Daylight Studio	FUEL CMS	Daylight StudioのFUEL CMSにおけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2026-30459	2026-04-24 11:31	2026-04-16	Show	GitHub Exploit DB Packet Storm

4743	9.8	緊急 Network	TOTOLINK	a3300r ファームウェア	TOTOLINKのa3300r ファームウェアにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-31170	2026-04-24 11:31	2026-04-9	Show	GitHub Exploit DB Packet Storm

4744	7	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows Simple Search Discovery Protocol (SSDP) サービスの特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-32068	2026-04-24 11:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

4745	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 1809 Microsoft Wind…	Windows Projected File System の特権の昇格の脆弱性	CWE-415 二重解放	CVE-2026-32069	2026-04-24 11:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

4746	7	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows 共通ログファイルシステムドライバーの特権の昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32070	2026-04-24 11:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

4747	7.5	重要 Network	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows ローカルセキュリティ機関サブシステムサービス (LSASS) のサービス拒否の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-32071	2026-04-24 11:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

4748	6.2	警告 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Active Directory のなりすましの脆弱性	CWE-287 不適切な認証	CVE-2026-32072	2026-04-24 11:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

4749	7	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32073	2026-04-24 11:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

4750	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 1809 Microsoft Wind…	Windows Projected File System の特権の昇格の脆弱性	CWE-415 二重解放	CVE-2026-32074	2026-04-24 11:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352061	-	id_software	quake_3_arena	Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.	NVD-CWE-Other	CVE-2000-0303	2008-09-11 04:04	2000-05-3	Show	GitHub Exploit DB Packet Storm

352062	-	openbsd	openbsd	The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.	NVD-CWE-Other	CVE-2000-0309	2008-09-11 04:04	2001-03-12	Show	GitHub Exploit DB Packet Storm

352063	-	openbsd	openbsd	IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.	NVD-CWE-Other	CVE-2000-0310	2008-09-11 04:04	2001-03-12	Show	GitHub Exploit DB Packet Storm

352064	-	openbsd	openbsd	Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.	NVD-CWE-Other	CVE-2000-0313	2008-09-11 04:04	2001-03-12	Show	GitHub Exploit DB Packet Storm

352065	-	atrium_software	mercur_mailserver	Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.	NVD-CWE-Other	CVE-2000-0318	2008-09-11 04:04	2000-04-21	Show	GitHub Exploit DB Packet Storm

352066	-	icradius	icradius	Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.	NVD-CWE-Other	CVE-2000-0321	2008-09-11 04:04	2000-04-24	Show	GitHub Exploit DB Packet Storm

352067	-	on_technology	meeting_maker	Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.	NVD-CWE-Other	CVE-2000-0326	2008-09-11 04:04	2000-04-25	Show	GitHub Exploit DB Packet Storm

352068	-	allaire	spectra	The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the cont…	NVD-CWE-Other	CVE-2000-0334	2008-09-11 04:04	2000-04-24	Show	GitHub Exploit DB Packet Storm

352069	-	gnu isc	glibc bind	The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.	NVD-CWE-Other	CVE-2000-0335	2008-09-11 04:04	2000-05-3	Show	GitHub Exploit DB Packet Storm

352070	-	openldap mandrakesoft redhat turbolinux	openldap mandrake_linux linux turbolinux	Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.	NVD-CWE-Other	CVE-2000-0336	2008-09-11 04:04	2000-04-21	Show	GitHub Exploit DB Packet Storm