Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2491 5.9 警告
Network 		fastify fastify-static fastifyのfastify-staticにおけるURL エンコーディング（16進エンコーディング）の処理に関する脆弱性 CWE-177
URLエンコーディング（16進エンコーディング）の不適切な処理 		CVE-2026-6414 2026-04-27 11:19 2026-04-16 Show GitHub Exploit DB Packet Storm
2492 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-6515 2026-04-27 11:19 2026-04-22 Show GitHub Exploit DB Packet Storm
2493 8.8 重要
Network 		CPS-IT Mailqueue CPS-ITのMailqueueにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-1323 2026-04-27 11:19 2026-03-17 Show GitHub Exploit DB Packet Storm
2494 6.5 警告
Network 		Linux Foundation Backstage/plugin-scaffolder-backend Linux FoundationのBackstage/plugin-scaffolder-backendにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-29184 2026-04-27 11:19 2026-03-7 Show GitHub Exploit DB Packet Storm
2495 4.3 警告
Network 		Guido Schmechel (ayacoo) redirect_tab Guido Schmechel (ayacoo)のredirect_tabにおける複数の脆弱性 CWE-200
CWE-862
CWE-862
CVE-2026-4202 2026-04-27 11:19 2026-03-17 Show GitHub Exploit DB Packet Storm
2496 8.8 重要
Network 		Ralf Freit (MrSilaz) mfa_mail Ralf Freit (MrSilaz)のmfa_mailにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-4208 2026-04-27 11:19 2026-03-17 Show GitHub Exploit DB Packet Storm
2497 8.1 重要
Network 		HashiCorp Vault HashiCorpのVaultにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-3605 2026-04-27 11:19 2026-04-17 Show GitHub Exploit DB Packet Storm
2498 9.4 緊急
Network 		dgraph dgraph dgraphにおける複数の脆弱性 CWE-200
CWE-215
CWE-522
CVE-2026-40173 2026-04-27 11:19 2026-04-15 Show GitHub Exploit DB Packet Storm
2499 7.8 重要
Local 		Composer Composer Composerにおける複数の脆弱性 CWE-20
CWE-78
CWE-78
CVE-2026-40176 2026-04-27 11:19 2026-04-15 Show GitHub Exploit DB Packet Storm
2500 6.1 警告
Network 		Apostrophe Technologies sanitize-html
ApostropheCMS 		Apostrophe TechnologiesのApostropheCMS等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40186 2026-04-27 11:18 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346851 - fms_inc.
microsoft 		total_vb_sourcebook
access 		Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data. NVD-CWE-Other
CVE-1999-0364 2016-10-18 10:59 1999-01-1 Show GitHub Exploit DB Packet Storm
346852 - eric_allman sendmail Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers. NVD-CWE-Other
CVE-1999-0393 2016-10-18 10:59 1999-01-1 Show GitHub Exploit DB Packet Storm
346853 - cyrix linux A bug in Cyrix CPUs on Linux allows local users to perform a denial of service. NVD-CWE-Other
CVE-1999-0403 2016-10-18 10:59 1999-02-1 Show GitHub Exploit DB Packet Storm
346854 - microsoft internet_information_server By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. NVD-CWE-Other
CVE-1999-0407 2016-10-18 10:59 1999-02-9 Show GitHub Exploit DB Packet Storm
346855 - - - Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection. NVD-CWE-Other
CVE-1999-0418 2016-10-18 10:59 1999-03-8 Show GitHub Exploit DB Packet Storm
346856 - ibm lotus_notes The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference. NVD-CWE-Other
CVE-1999-0429 2016-10-18 10:59 1999-03-1 Show GitHub Exploit DB Packet Storm
346857 - netscape
sun 		communicator
navigator
java 		The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. NVD-CWE-Other
CVE-1999-0440 2016-10-18 10:59 1999-03-1 Show GitHub Exploit DB Packet Storm
346858 - tripwire tripwire Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames. NVD-CWE-Other
CVE-1999-0464 2016-10-18 10:59 1999-01-4 Show GitHub Exploit DB Packet Storm
346859 - selena_sol selena_sol_webstore An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. NVD-CWE-Other
CVE-1999-0604 2016-10-18 10:59 1999-04-20 Show GitHub Exploit DB Packet Storm
346860 - austin_contract_computing merchant_order_form An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. CWE-200
Information Exposure 		CVE-1999-0605 2016-10-18 10:59 1999-04-1 Show GitHub Exploit DB Packet Storm