Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3351 7.1 重要
Network 		BMC Software BMC FootPrints ITSM BMC SoftwareのBMC FootPrints ITSMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-71258 2026-04-24 11:38 2026-03-19 Show GitHub Exploit DB Packet Storm
3352 7.1 重要
Network 		BMC Software BMC FootPrints ITSM BMC SoftwareのBMC FootPrints ITSMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-71259 2026-04-24 11:38 2026-03-19 Show GitHub Exploit DB Packet Storm
3353 8.8 重要
Network 		BMC Software BMC FootPrints ITSM BMC SoftwareのBMC FootPrints ITSMにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-71260 2026-04-24 11:38 2026-03-19 Show GitHub Exploit DB Packet Storm
3354 6.1 警告
Network 		アドビシステムズ Adobe Connect
Adobe Connect Desktop Application 		アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21331 2026-04-24 11:38 2026-04-14 Show GitHub Exploit DB Packet Storm
3355 5.4 警告
Network 		オラクル PeopleSoft Enterprise HCM Shared Components オラクルのPeoplesoft Enterprise Hcm Shared Componentsにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-22019 2026-04-24 11:38 2026-04-21 Show GitHub Exploit DB Packet Storm
3356 6.1 警告
Adjacent 		Schneider Electric PowerChute Serial Shutdown Schneider Electric のPowerChute Serial Shutdownにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-2399 2026-04-24 11:38 2026-04-14 Show GitHub Exploit DB Packet Storm
3357 4.3 警告
Network 		Schneider Electric PowerChute Serial Shutdown Schneider Electric のPowerChute Serial ShutdownにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-2400 2026-04-24 11:38 2026-04-14 Show GitHub Exploit DB Packet Storm
3358 5 警告
Local 		Schneider Electric PowerChute Serial Shutdown Schneider Electric のPowerChute Serial Shutdownにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-2401 2026-04-24 11:38 2026-04-14 Show GitHub Exploit DB Packet Storm
3359 5.3 警告
Network 		Schneider Electric PowerChute Serial Shutdown Schneider Electric のPowerChute Serial Shutdownにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-2402 2026-04-24 11:38 2026-04-14 Show GitHub Exploit DB Packet Storm
3360 4.3 警告
Network 		Schneider Electric PowerChute Serial Shutdown Schneider Electric のPowerChute Serial Shutdownにおける入力で指定された数量の不適切な検証に関する脆弱性 CWE-1284
入力で指定された数量の不適切な検証 		CVE-2026-2403 2026-04-24 11:38 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347451 - ascend multilink_ppp_for_isdn Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier. NVD-CWE-Other
CVE-1999-1203 2016-10-18 11:02 1999-02-12 Show GitHub Exploit DB Packet Storm
347452 - systemsoft systemwizard SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allow… NVD-CWE-Other
CVE-1999-1206 2016-10-18 11:02 1999-12-31 Show GitHub Exploit DB Packet Storm
347453 - apache http_server mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core. NVD-CWE-Other
CVE-1999-1293 2016-10-18 11:02 1999-12-31 Show GitHub Exploit DB Packet Storm
347454 - redhat
slackware 		linux
slackware_linux 		rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system call… NVD-CWE-Other
CVE-1999-1299 2016-10-18 11:02 1997-02-3 Show GitHub Exploit DB Packet Storm
347455 - symantec norton_antivirus Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navi… NVD-CWE-Other
CVE-1999-1323 2016-10-18 11:02 1999-04-9 Show GitHub Exploit DB Packet Storm
347456 - redhat linux Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable. NVD-CWE-Other
CVE-1999-1327 2016-10-18 11:02 1999-12-31 Show GitHub Exploit DB Packet Storm
347457 - redhat linux linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack. NVD-CWE-Other
CVE-1999-1328 2016-10-18 11:02 1999-12-31 Show GitHub Exploit DB Packet Storm
347458 - debian
redhat 		debian_linux
linux 		The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf. NVD-CWE-Other
CVE-1999-1330 2016-10-18 11:02 1999-12-31 Show GitHub Exploit DB Packet Storm
347459 - ibm aix inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attac… NVD-CWE-Other
CVE-1999-1075 2016-10-18 11:01 1998-03-18 Show GitHub Exploit DB Packet Storm
347460 - ibm aix Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program. NVD-CWE-Other
CVE-1999-1079 2016-10-18 11:01 1999-05-6 Show GitHub Exploit DB Packet Storm