Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2481 9.8 緊急
Network 		angeljudesuarez School Management System Project In PHP Source Code Angel Jude Reyes SuarezのSchool Management System Project In PHP Source Codeにおける複数の脆弱性 CWE-74
CWE-89
CVE-2026-1590 2026-02-4 18:39 2026-01-29 Show GitHub Exploit DB Packet Storm
2482 7.9 重要
Network 		Atlassian Crowd AtlassianのCrowdにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2026-21569 2026-02-4 18:39 2026-01-28 Show GitHub Exploit DB Packet Storm
2483 6.5 警告
Network 		Chainlit Chainlit Chainlitにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-22218 2026-02-4 18:39 2026-01-20 Show GitHub Exploit DB Packet Storm
2484 7.7 重要
Network 		Chainlit Chainlit Chainlitにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-22219 2026-02-4 18:39 2026-01-20 Show GitHub Exploit DB Packet Storm
2485 6.1 警告
Local 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける複数の脆弱性 CWE-476
CWE-787
CVE-2025-11187 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2486 9.8 緊急
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2025-15467 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2487 5.9 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-15468 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2488 5.5 警告
Local 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2025-15469 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2489 5.9 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2025-66199 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
2490 4.7 警告
Local 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2025-68160 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349201 - svgalib svgalib Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable. NVD-CWE-Other
CVE-1999-1483 2008-09-6 05:19 1997-06-19 Show GitHub Exploit DB Packet Storm
349202 - ibm aix Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system. NVD-CWE-Other
CVE-1999-1487 2008-09-6 05:19 1998-01-21 Show GitHub Exploit DB Packet Storm
349203 - ibm system_data_repository sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. NVD-CWE-Other
CVE-1999-1488 2008-09-6 05:19 1999-12-31 Show GitHub Exploit DB Packet Storm
349204 - slackware slackware_linux Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument. NVD-CWE-Other
CVE-1999-1489 2008-09-6 05:19 1997-03-4 Show GitHub Exploit DB Packet Storm
349205 - ipswitch imail Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts. NVD-CWE-Other
CVE-1999-1497 2008-09-6 05:19 1999-12-21 Show GitHub Exploit DB Packet Storm
349206 - slackware slackware_linux Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file. NVD-CWE-Other
CVE-1999-1498 2008-09-6 05:19 1998-04-6 Show GitHub Exploit DB Packet Storm
349207 - isc bind named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used. NVD-CWE-Other
CVE-1999-1499 2008-09-6 05:19 1998-04-10 Show GitHub Exploit DB Packet Storm
349208 - nfr nfr Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field. NVD-CWE-Other
CVE-1999-1503 2008-09-6 05:19 1998-04-8 Show GitHub Exploit DB Packet Storm
349209 - stalker stalker_internet_mail_server Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command. NVD-CWE-Other
CVE-1999-1504 2008-09-6 05:19 1998-04-8 Show GitHub Exploit DB Packet Storm
349210 - sun sunos Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin. NVD-CWE-Other
CVE-1999-1506 2008-09-6 05:19 1990-01-29 Show GitHub Exploit DB Packet Storm