Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1931 8.8 重要
Network
Jos de Jong math.js Math.jsにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更
CVE-2026-40897 2026-04-30 12:12 2026-04-24 Show GitHub Exploit DB Packet Storm
1932 8.8 重要
Network
Paperclip paperclipai PaperclipのpaperclipaiにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-41208 2026-04-30 12:12 2026-04-23 Show GitHub Exploit DB Packet Storm
1933 6.5 警告
Network
Frappe Frappe HR FrappeのFrappe HRにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-41320 2026-04-30 12:12 2026-04-21 Show GitHub Exploit DB Packet Storm
1934 7.5 重要
Network
chargepoint Home Flex CPH50 Firmware ChargePoint, Inc.のHome Flex CPH50 Firmwareにおける重要な情報を含むソースコードに関する脆弱性 CWE-540
機密情報を含むソースコード
CVE-2026-4155 2026-04-30 12:12 2026-04-11 Show GitHub Exploit DB Packet Storm
1935 7.5 重要
Adjacent
chargepoint Home Flex CPH50 Firmware ChargePoint, Inc.のHome Flex CPH50 Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-4156 2026-04-30 12:12 2026-04-11 Show GitHub Exploit DB Packet Storm
1936 7.5 重要
Adjacent
chargepoint Home Flex CPH50 Firmware ChargePoint, Inc.のHome Flex CPH50 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-4157 2026-04-30 12:12 2026-04-11 Show GitHub Exploit DB Packet Storm
1937 6.6 警告
Local
Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-41664 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
1938 6.1 警告
Local
Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-41665 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
1939 6.6 警告
Local
Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-41666 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
1940 6.6 警告
Local
Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-41667 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346651 - sco unixware UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. NVD-CWE-Other
CVE-2000-0029 2016-10-18 11:06 1999-12-27 Show GitHub Exploit DB Packet Storm
346652 - great_circle_associates majordomo resend command in Majordomo allows local users to gain privileges via shell metacharacters. NVD-CWE-Other
CVE-2000-0035 2016-10-18 11:06 1999-12-28 Show GitHub Exploit DB Packet Storm
346653 - great_circle_associates majordomo Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file. NVD-CWE-Other
CVE-2000-0037 2016-10-18 11:06 1999-12-28 Show GitHub Exploit DB Packet Storm
346654 - avirt rover Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name. NVD-CWE-Other
CVE-2000-0060 2016-10-18 11:06 1999-12-27 Show GitHub Exploit DB Packet Storm
346655 - intel inbusiness_email_station daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail. NVD-CWE-Other
CVE-2000-0068 2016-10-18 11:06 1999-12-14 Show GitHub Exploit DB Packet Storm
346656 - computer_power_solutions visual_casel Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly ga… NVD-CWE-Other
CVE-2000-0072 2016-10-18 11:06 2000-01-17 Show GitHub Exploit DB Packet Storm
346657 - berkeley
debian
nvi
debian_linux
nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover. NVD-CWE-Other
CVE-2000-0076 2016-10-18 11:06 1999-12-30 Show GitHub Exploit DB Packet Storm
346658 - ibm aix AIX techlibss allows local users to overwrite files via a symlink attack. NVD-CWE-Other
CVE-2000-0080 2016-10-18 11:06 2000-01-10 Show GitHub Exploit DB Packet Storm
346659 - netscape communicator
navigator
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attack… NVD-CWE-Other
CVE-2000-0087 2016-10-18 11:06 2000-01-12 Show GitHub Exploit DB Packet Storm
346660 - sco unixware Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument. NVD-CWE-Other
CVE-2000-0099 2016-10-18 11:06 2000-01-18 Show GitHub Exploit DB Packet Storm