Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2951 6.5 警告
Network 		Pterodactyl Panel PterodactylのPanelにおける複数の脆弱性 CWE-400
CWE-413
CWE-667
CVE-2025-69198 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2952 6.5 警告
Network 		Pterodactyl Wings PterodactylのWingsにおける複数の脆弱性 CWE-400
CWE-770
CWE-770
CVE-2025-69199 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2953 9.8 緊急
Network 		fabianros Mobile Shop Management System In PHP With Source Code Fabian RosのMobile Shop Management System In PHP With Source Codeにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2025-69564 2026-02-4 18:37 2026-01-27 Show GitHub Exploit DB Packet Storm
2954 6.5 警告
Network 		PHPGurukul Online Course Registration PHPGurukulのOnline Course Registrationにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-70899 2026-02-4 18:37 2026-01-22 Show GitHub Exploit DB Packet Storm
2955 7.3 重要
Local 		Lenovo app store Lenovoのapp storeにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-8485 2026-02-4 18:37 2025-11-12 Show GitHub Exploit DB Packet Storm
2956 7.8 重要
Local 		Lenovo PCManager LenovoのPCManagerにおける不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行 		CVE-2025-8486 2026-02-4 18:37 2025-10-15 Show GitHub Exploit DB Packet Storm
2957 4.9 警告
Network 		M-Files M-Files Server M-FilesのM-Files Serverにおける入力の構文的正当性の検証に関する脆弱性 CWE-1286
入力の構文的正当性の不適切な検証 		CVE-2026-0663 2026-02-4 18:37 2026-01-21 Show GitHub Exploit DB Packet Storm
2958 6.1 警告
Network 		plantuml plantuml plantumlにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-0858 2026-02-4 18:37 2026-01-16 Show GitHub Exploit DB Packet Storm
2959 9.8 緊急
Network 		itsourcecode School Management System itsourcecodeのSchool Management Systemにおける複数の脆弱性 CWE-74
CWE-89
CVE-2026-1176 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2960 4.6 警告
Local 		Esri ArcGIS Pro EsriのArcGIS Proにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-1446 2026-02-4 18:37 2026-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347801 - sun cobalt_raq Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server. NVD-CWE-Other
CVE-1999-0408 2008-09-9 21:34 1999-02-25 Show GitHub Exploit DB Packet Storm
347802 - suse suse_linux Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access. NVD-CWE-Other
CVE-1999-0409 2008-09-9 21:34 1999-03-4 Show GitHub Exploit DB Packet Storm
347803 - sgi irix A buffer overflow in the SGI X server allows local users to gain root access through the X server font path. NVD-CWE-Other
CVE-1999-0413 2008-09-9 21:34 1999-03-1 Show GitHub Exploit DB Packet Storm
347804 - cisco cisco_7xx_routers The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. NVD-CWE-Other
CVE-1999-0415 2008-09-9 21:34 1999-03-11 Show GitHub Exploit DB Packet Storm
347805 - cisco cisco_7xx_routers Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port. NVD-CWE-Other
CVE-1999-0416 2008-09-9 21:34 1999-03-11 Show GitHub Exploit DB Packet Storm
347806 - slackware slackware_linux During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password. NVD-CWE-Other
CVE-1999-0421 2008-09-9 21:34 1999-03-17 Show GitHub Exploit DB Packet Storm
347807 - hp hp-ux Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges. NVD-CWE-Other
CVE-1999-0423 2008-09-9 21:34 1994-06-1 Show GitHub Exploit DB Packet Storm
347808 - cisco catalyst_12xx_supervisor_software
catalyst_29xx_supervisor_software
catalyst_5xxx_supervisor_software 		Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload. NVD-CWE-Other
CVE-1999-0430 2008-09-9 21:34 1999-03-1 Show GitHub Exploit DB Packet Storm
347809 - hp hp-ux ftp on HP-UX 11.00 allows local users to gain privileges. NVD-CWE-Other
CVE-1999-0432 2008-09-9 21:34 1999-03-1 Show GitHub Exploit DB Packet Storm
347810 - caldera
debian
netbsd
redhat
suse 		openlinux
debian_linux
netbsd
linux
suse_linux 		XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. NVD-CWE-Other
CVE-1999-0434 2008-09-9 21:34 1999-03-30 Show GitHub Exploit DB Packet Storm