Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3771 8.8 重要
Network 		Intermesh Group-Office Intermesh BVのGroup-OfficeにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-33755 2026-04-21 10:48 2026-03-27 Show GitHub Exploit DB Packet Storm
3772 7.5 重要
Network 		saleor saleor saleorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33756 2026-04-21 10:48 2026-04-8 Show GitHub Exploit DB Packet Storm
3773 3.7 低
Network 		Apostrophe Technologies ApostropheCMS Apostrophe TechnologiesのApostropheCMSにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-33877 2026-04-21 10:48 2026-04-15 Show GitHub Exploit DB Packet Storm
3774 5.3 警告
Network 		Apostrophe Technologies ApostropheCMS Apostrophe TechnologiesのApostropheCMSにおける複数の脆弱性 CWE-200
CWE-863
CVE-2026-33888 2026-04-21 10:48 2026-04-15 Show GitHub Exploit DB Packet Storm
3775 5.4 警告
Network 		Apostrophe Technologies ApostropheCMS Apostrophe TechnologiesのApostropheCMSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-33889 2026-04-21 10:48 2026-04-15 Show GitHub Exploit DB Packet Storm
3776 6.5 警告
Adjacent 		Ellanetworks Ella Core EllanetworksのElla CoreにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-33903 2026-04-21 10:48 2026-03-27 Show GitHub Exploit DB Packet Storm
3777 6.5 警告
Adjacent 		Ellanetworks Ella Core EllanetworksのElla Coreにおけるデッドロックに関する脆弱性 CWE-833
デッドロック 		CVE-2026-33904 2026-04-21 10:48 2026-03-27 Show GitHub Exploit DB Packet Storm
3778 7.2 重要
Network 		Ellanetworks Ella Core EllanetworksのElla Coreにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-33906 2026-04-21 10:48 2026-03-27 Show GitHub Exploit DB Packet Storm
3779 6.5 警告
Adjacent 		Ellanetworks Ella Core EllanetworksのElla CoreにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-33907 2026-04-21 10:48 2026-03-27 Show GitHub Exploit DB Packet Storm
3780 4.3 警告
Network 		Apache Software Foundation PDFBox Apache Software FoundationのPDFBoxにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33929 2026-04-21 10:48 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347771 - oracle web_listener Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent. CWE-20
 Improper Input Validation  		CVE-1999-1547 2016-10-18 11:05 1999-11-25 Show GitHub Exploit DB Packet Storm
347772 - microsoft index_server Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physic… NVD-CWE-Other
CVE-1999-1397 2016-10-18 11:04 1999-03-23 Show GitHub Exploit DB Packet Storm
347773 - sgi irix Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. NVD-CWE-Other
CVE-1999-1398 2016-10-18 11:04 1997-05-7 Show GitHub Exploit DB Packet Storm
347774 - sgi irix spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed. NVD-CWE-Other
CVE-1999-1399 2016-10-18 11:04 1997-08-20 Show GitHub Exploit DB Packet Storm
347775 - the_economist the_economist_1999_screen_saver The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer wh… NVD-CWE-Other
CVE-1999-1400 2016-10-18 11:04 1999-06-3 Show GitHub Exploit DB Packet Storm
347776 - ibm aix snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users … NVD-CWE-Other
CVE-1999-1405 2016-10-18 11:04 1999-02-17 Show GitHub Exploit DB Packet Storm
347777 - ibm aix Fixed in AIX 4.3 and 4.3.2 AIX 4.3.x APAR: IX88263 AIX 4.2.x APAR: IX88261 NVD-CWE-Other
CVE-1999-1405 2016-10-18 11:04 1999-02-17 Show GitHub Exploit DB Packet Storm
347778 - redhat linux dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel. NVD-CWE-Other
CVE-1999-1406 2016-10-18 11:04 1998-07-29 Show GitHub Exploit DB Packet Storm
347779 - redhat linux ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file. NVD-CWE-Other
CVE-1999-1407 2016-10-18 11:04 1998-03-9 Show GitHub Exploit DB Packet Storm
347780 - hp
ibm 		hp-ux
aix 		Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the sock… NVD-CWE-Other
CVE-1999-1408 2016-10-18 11:04 1997-03-5 Show GitHub Exploit DB Packet Storm