Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2301 8.8 重要
Local 		PackageKit Project PackageKit PackageKit ProjectのPackageKitにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41651 2026-04-27 11:29 2026-04-22 Show GitHub Exploit DB Packet Storm
2302 4.4 警告
Local 		libjxl project libjxl libjxl projectのlibjxlにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2025-12474 2026-04-27 11:28 2026-02-11 Show GitHub Exploit DB Packet Storm
2303 7.5 重要
Network 		FirebirdSQL Firebird FirebirdSQLのFirebirdにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-65104 2026-04-27 11:28 2026-04-17 Show GitHub Exploit DB Packet Storm
2304 6.7 警告
Local 		マイクロソフト Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 10 22h2
Microsoft Wind… 		UEFI セキュア ブートのセキュリティ機能バイパスの脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存 		CVE-2026-0390 2026-04-27 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
2305 4.3 警告
Network 		wolfssh wolfssh wolfsshにおける複数の脆弱性 CWE-125
CWE-126
CVE-2026-0930 2026-04-27 11:28 2026-04-20 Show GitHub Exploit DB Packet Storm
2306 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind… 		Windows COM サーバーの情報漏えいの脆弱性 CWE-843
型の取り違え 		CVE-2026-20806 2026-04-27 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
2307 4.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows 回復環境のセキュリティ機能バイパスの脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除 		CVE-2026-20928 2026-04-27 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
2308 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 10 1809
Microsoft Windows 10 22h2
Microsoft Wind… 		Windows Management サービスの特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-20930 2026-04-27 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
2309 6 警告
Local 		オラクル JDK
JRE
Oracle GraalVM 		オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22003 2026-04-27 11:28 2026-04-21 Show GitHub Exploit DB Packet Storm
2310 3.7 低
Network 		Pivotal Software, Inc. Spring Security VMwareのSpring Securityにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-22746 2026-04-27 11:28 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346801 - netscape enterprise_server Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command u… NVD-CWE-Other
CVE-1999-1130 2016-10-18 11:01 1999-07-30 Show GitHub Exploit DB Packet Storm
346802 - microsoft windows_nt Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a… NVD-CWE-Other
CVE-1999-1132 2016-10-18 11:01 1999-12-31 Show GitHub Exploit DB Packet Storm
346803 - hp hp-ux Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges. NVD-CWE-Other
CVE-1999-1160 2016-10-18 11:01 1997-02-2 Show GitHub Exploit DB Packet Storm
346804 - hp 9000 Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation. NVD-CWE-Other
CVE-1999-1163 2016-10-18 11:01 1999-11-24 Show GitHub Exploit DB Packet Storm
346805 - microsoft outlook
outlook_express 		Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang. NVD-CWE-Other
CVE-1999-1164 2016-10-18 11:01 1999-06-25 Show GitHub Exploit DB Packet Storm
346806 - gnu fingerd GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) r… NVD-CWE-Other
CVE-1999-1165 2016-10-18 11:01 1999-07-21 Show GitHub Exploit DB Packet Storm
346807 - corel wordperfect Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working di… NVD-CWE-Other
CVE-1999-1173 2016-10-18 11:01 1998-12-18 Show GitHub Exploit DB Packet Storm
346808 - aaron_ledbetter
jidentd 		cidentd
jidentd 		Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script. NVD-CWE-Other
CVE-1999-1176 2016-10-18 11:01 1998-01-10 Show GitHub Exploit DB Packet Storm
346809 - delix
caldera
debian
lst
redhat
suse 		dld
openlinux_lite
debian_linux
lst_power_linux
linux
suse_linux 		Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.… NVD-CWE-Other
CVE-1999-1182 2016-10-18 11:01 1997-07-17 Show GitHub Exploit DB Packet Storm
346810 - todd_miller sudo sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. NVD-CWE-Other
CVE-1999-0958 2016-10-18 11:00 1998-01-12 Show GitHub Exploit DB Packet Storm