Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4771 8.8 重要
Network
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows Advanced Rasterization Platform の特権昇格の脆弱性 CWE-190
CWE-681
CVE-2026-26178 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4772 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind…
Windows カーネルの特権の昇格の脆弱性 CWE-415
二重解放
CVE-2026-26179 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4773 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows カーネルの特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-26180 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4774 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind…
Microsoft Resilient File System の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-26181 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4775 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-26182 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4776 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso…
リモート アクセス管理サービス/API (RPC サーバー) の特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-26183 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4777 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows Projected File System の特権の昇格の脆弱性 CWE-126
バッファオーバーリード
CVE-2026-26184 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4778 4.4 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows&…
Windows Hello のセキュリティ機能のバイパスの脆弱性 CWE-20
不適切な入力確認
CVE-2026-27906 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
4779 7.5 重要
Network
FFmpeg FFmpeg FFmpegにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-30997 2026-04-27 11:23 2026-04-13 Show GitHub Exploit DB Packet Storm
4780 7.5 重要
Network
FFmpeg FFmpeg FFmpegにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-30998 2026-04-27 11:23 2026-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354671 - wrq wrq_reflection_for_secure_it_windows_server WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authenticat… NVD-CWE-Other
CVE-2005-2770 2008-09-6 05:52 2005-09-3 Show GitHub Exploit DB Packet Storm
354672 - f-secure
wrq
f-secure_ssh_server
wrq_reflection_for_secure_it_windows_server
WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which… NVD-CWE-Other
CVE-2005-2771 2008-09-6 05:52 2005-09-3 Show GitHub Exploit DB Packet Storm
354673 - linksys wrt54g Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request. NVD-CWE-Other
CVE-2005-2799 2008-09-6 05:52 2005-09-16 Show GitHub Exploit DB Packet Storm
354674 - frox frox frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option. NVD-CWE-Other
CVE-2005-2807 2008-09-6 05:52 2005-09-8 Show GitHub Exploit DB Packet Storm
354675 - frox frox frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restrictions and access blocked hosts. NVD-CWE-Other
CVE-2005-2808 2008-09-6 05:52 2005-09-8 Show GitHub Exploit DB Packet Storm
354676 - silc secure_internet_live_conferencing silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file. NVD-CWE-Other
CVE-2005-2809 2008-09-6 05:52 2005-09-8 Show GitHub Exploit DB Packet Storm
354677 - net-snmp net-snmp Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to gain privileges. NVD-CWE-Other
CVE-2005-2811 2008-09-6 05:52 2005-09-8 Show GitHub Exploit DB Packet Storm
354678 - man2web man2web man2web allows remote attackers to execute arbitrary commands via -P arguments. NVD-CWE-Other
CVE-2005-2812 2008-09-6 05:52 2005-09-8 Show GitHub Exploit DB Packet Storm
354679 - phorum phorum Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a… NVD-CWE-Other
CVE-2005-2836 2008-09-6 05:52 2005-09-8 Show GitHub Exploit DB Packet Storm
354680 - maxdev md-pro Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via (1) dl-search.php or (2) wl-search.php. NVD-CWE-Other
CVE-2005-2839 2008-09-6 05:52 2005-09-8 Show GitHub Exploit DB Packet Storm