Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3991 7.5 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-28991 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3992 4.7 警告
Local 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-28992 2026-05-15 11:03 2026-05-11 Show GitHub Exploit DB Packet Storm
3993 5.5 警告
Local 		アップル visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28993 2026-05-15 11:03 2026-05-11 Show GitHub Exploit DB Packet Storm
3994 5.3 警告
Adjacent 		アップル tvOS
iOS
iPadOS
watchOS 		アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-28994 2026-05-15 11:03 2026-05-11 Show GitHub Exploit DB Packet Storm
3995 9.8 緊急
Network 		Rocket.Chat Rocket.Chat Rocket.ChatにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-29198 2026-05-15 11:03 2026-04-23 Show GitHub Exploit DB Packet Storm
3996 6.5 警告
Network 		Textpattern Textpattern CMS TextpatternのTextpattern CMSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-30452 2026-05-15 11:03 2026-04-21 Show GitHub Exploit DB Packet Storm
3997 9.1 緊急
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-30805 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
3998 8.8 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-30807 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
3999 8.1 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるセッションの固定化の脆弱性 CWE-384
セッションの固定化 		CVE-2026-30808 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
4000 8.8 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-30810 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345011 - hp jetdirect HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disa… NVD-CWE-Other
CVE-1999-1061 2017-12-19 11:29 1997-10-4 Show GitHub Exploit DB Packet Storm
345012 - hp jetdirect HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100. NVD-CWE-Other
CVE-1999-1062 2017-12-19 11:29 1997-10-4 Show GitHub Exploit DB Packet Storm
345013 - cdomain cdomainfree CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter. NVD-CWE-Other
CVE-1999-1063 2017-12-19 11:29 1999-06-1 Show GitHub Exploit DB Packet Storm
345014 - icat electronic_commerce_suite Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter. NVD-CWE-Other
CVE-1999-1069 2017-12-19 11:29 1997-11-8 Show GitHub Exploit DB Packet Storm
345015 - excite ews Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file. NVD-CWE-Other
CVE-1999-1071 2017-12-19 11:29 1998-11-30 Show GitHub Exploit DB Packet Storm
345016 - novell web_server Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. NVD-CWE-Other
CVE-1999-1081 2017-12-19 11:29 2002-01-15 Show GitHub Exploit DB Packet Storm
345017 - rtin
tin 		rtin
tin 		UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlin… NVD-CWE-Other
CVE-1999-1091 2017-12-19 11:29 2002-01-15 Show GitHub Exploit DB Packet Storm
345018 - kde kde Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable. NVD-CWE-Other
CVE-1999-1096 2017-12-19 11:29 1998-05-16 Show GitHub Exploit DB Packet Storm
345019 - microsoft netmeeting Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty. NVD-CWE-Other
CVE-1999-1097 2017-12-19 11:29 1999-05-4 Show GitHub Exploit DB Packet Storm
345020 - kde kde Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument. NVD-CWE-Other
CVE-1999-1106 2017-12-19 11:29 1998-04-29 Show GitHub Exploit DB Packet Storm