Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5081 9.8 緊急
Network
TOTOLINK a3300r ファームウェア TOTOLINKのa3300r ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-31170 2026-04-24 11:31 2026-04-9 Show GitHub Exploit DB Packet Storm
5082 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows Simple Search Discovery Protocol (SSDP) サービスの特権昇格の脆弱性 CWE-362
競合状態
CVE-2026-32068 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5083 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows Projected File System の特権の昇格の脆弱性 CWE-415
二重解放
CVE-2026-32069 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5084 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32070 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5085 7.5 重要
Network
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows ローカル セキュリティ機関サブシステム サービス (LSASS) のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-32071 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5086 6.2 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Active Directory のなりすましの脆弱性 CWE-287
不適切な認証
CVE-2026-32072 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5087 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32073 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5088 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows Projected File System の特権の昇格の脆弱性 CWE-415
二重解放
CVE-2026-32074 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5089 7.5 重要
Network
EMQX nanomq EMQXのnanomqにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-32135 2026-04-24 11:31 2026-04-20 Show GitHub Exploit DB Packet Storm
5090 7.4 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows UPnP デバイス ホストのリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32156 2026-04-24 11:31 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 8.8 HIGH
Network
- - A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. The ma… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10125 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
52 8.8 HIGH
Network
- - A vulnerability was determined in Shibby Tomato up to 1.28. Affected is the function rip_zebra_read_ipv4 of the file /usr/sbin/ripd of the component Zserv Handler. Executing a manipulation can lead t… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10124 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
53 8.8 HIGH
Network
- - A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetDomainFilter of the file /goform/formSetDomainFilter. Performing a manipulation of the argument blocked_doma… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10123 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
54 8.8 HIGH
Network
- - A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetProtocolFilter of the file /goform/formSetProtocolFilter. Such manipulation of the argument protocol_na… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10122 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
55 8.8 HIGH
Network
- - A flaw has been found in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formSetUrlFilter of the file /goform/formSetUrlFilter. This manipulation of the argument keyword_list/keywor… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10121 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
56 7.5 HIGH
Network
- - WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a malformed payload file containing a large buffer of repeated characters. Attackers c… New CWE-120
Classic Buffer Overflow
CVE-2018-25426 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
57 8.2 HIGH
Network
- - Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid parameters. Attackers … New CWE-89
SQL Injection
CVE-2018-25425 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
58 8.2 HIGH
Network
- - Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login and password parameters.… New CWE-89
SQL Injection
CVE-2018-25424 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
59 6.2 MEDIUM
Local
- - Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 byte… New CWE-120
Classic Buffer Overflow
CVE-2018-25423 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
60 8.2 HIGH
Network
- - MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attacke… New CWE-89
SQL Injection
CVE-2018-25422 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm