Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4351 5 警告
Network 		Weblate Weblate Weblateにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-33440 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
4352 4.3 警告
Network 		Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-33460 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
4353 9.8 緊急
Network 		Elasticsearch B.V. Logstash Elasticsearch B.V.のLogstashにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33466 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
4354 4.3 警告
Network 		EspoCRM EspoCRM EspoCRMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-33534 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
4355 7.8 重要
Local 		Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-33632 2026-04-23 10:13 2026-03-26 Show GitHub Exploit DB Packet Storm
4356 5.4 警告
Network 		EspoCRM EspoCRM EspoCRMにおける複数の脆弱性 CWE-116
CWE-80
CVE-2026-33657 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
4357 3.1 低
Network 		EspoCRM EspoCRM EspoCRMにおける複数の脆弱性 CWE-367
CWE-918
CVE-2026-33659 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
4358 5.4 警告
Network 		EspoCRM EspoCRM EspoCRMにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-33740 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
4359 5.3 警告
Network 		The Go Project tiff The Go Projectのtiffにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-33809 2026-04-23 10:12 2026-03-25 Show GitHub Exploit DB Packet Storm
4360 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-33947 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350561 - microsoft hotmail Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account. NVD-CWE-Other
CVE-1999-0750 2008-09-9 21:35 1999-09-13 Show GitHub Exploit DB Packet Storm
350562 - hughes msql The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories. NVD-CWE-Other
CVE-1999-0753 2008-09-9 21:35 1999-08-17 Show GitHub Exploit DB Packet Storm
350563 - isc inn The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable. NVD-CWE-Other
CVE-1999-0754 2008-09-9 21:35 1999-05-11 Show GitHub Exploit DB Packet Storm
350564 - fuseware fusemail Buffer overflow in FuseMAIL POP service via long USER and PASS commands. NVD-CWE-Other
CVE-1999-0759 2008-09-9 21:35 1999-09-13 Show GitHub Exploit DB Packet Storm
350565 - freebsd freebsd Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. NVD-CWE-Other
CVE-1999-0761 2008-09-9 21:35 2000-09-16 Show GitHub Exploit DB Packet Storm
350566 - netbsd netbsd NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. NVD-CWE-Other
CVE-1999-0763 2008-09-9 21:35 1999-05-1 Show GitHub Exploit DB Packet Storm
350567 - netbsd netbsd NetBSD allows ARP packets to overwrite static ARP entries. NVD-CWE-Other
CVE-1999-0764 2008-09-9 21:35 1999-05-1 Show GitHub Exploit DB Packet Storm
350568 - sgi irix SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. NVD-CWE-Other
CVE-1999-0765 2008-09-9 21:35 1999-05-19 Show GitHub Exploit DB Packet Storm
350569 - redhat
suse 		linux
suse_linux 		Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. NVD-CWE-Other
CVE-1999-0768 2008-09-9 21:35 1999-08-25 Show GitHub Exploit DB Packet Storm
350570 - paul_vixie
caldera
debian
redhat 		vixie_cron
openlinux
debian_linux
linux 		Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. NVD-CWE-Other
CVE-1999-0769 2008-09-9 21:35 1999-08-25 Show GitHub Exploit DB Packet Storm