Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4491 6.8 警告
Network
OctoberCMS October OctoberCMSのOctoberにおける複数の脆弱性 CWE-284
CWE-693
CVE-2026-22692 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
4492 5.5 警告
Local
gimp gimp gimpにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-2271 2026-04-23 10:15 2026-03-26 Show GitHub Exploit DB Packet Storm
4493 8.2 重要
Network
GNOME Project
レッドハット
libsoup
Red Hat Enterprise Linux
GNOME Project等の複数ベンダの製品における期限切れのポインタデリファレンスに関する脆弱性 CWE-825
期限切れのポインタデリファレンス
CVE-2026-2436 2026-04-23 10:15 2026-03-26 Show GitHub Exploit DB Packet Storm
4494 5.4 警告
Network
OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-24906 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
4495 5.4 警告
Network
OctoberCMS October OctoberCMSのOctoberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-24907 2026-04-23 10:15 2026-04-14 Show GitHub Exploit DB Packet Storm
4496 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおけるリクエストの直接送信に関する脆弱性 CWE-425
リクエストの直接送信
CVE-2026-25679 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
4497 9.8 緊急
Network
Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-25917 2026-04-23 10:14 2026-04-18 Show GitHub Exploit DB Packet Storm
4498 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-27137 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
4499 5.9 警告
Network
The Go Project Go The Go ProjectのGoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-27138 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
4500 2.5
Local
The Go Project Go The Go ProjectのGoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-27139 2026-04-23 10:14 2026-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351041 - netscape
university_of_washington
messaging_server
imap
Arbitrary command execution via IMAP buffer overflow in authenticate command. NVD-CWE-Other
CVE-1999-0005 2008-09-9 21:33 1998-07-20 Show GitHub Exploit DB Packet Storm
351042 - cde
hp
ibm
cde
hp-ux
vvos
aix
Unauthorized privileged access or denial of service via dtappgather program in CDE. NVD-CWE-Other
CVE-1999-0014 2008-09-9 21:33 1998-01-21 Show GitHub Exploit DB Packet Storm
351043 - cisco
gnu
microsoft
hp
netbsd
sun
ios
inet
winsock
hp-ux
windows_95
windows_nt
netbsd
sunos
Land IP denial of service. NVD-CWE-Other
CVE-1999-0016 2008-09-9 21:33 1997-12-1 Show GitHub Exploit DB Packet Storm
351044 - data_general
ncr
sgi
ibm
nighthawk
sco
sun
dg_ux
mp-ras
irix
aix
cx_ux
powerux
open_desktop
openserver
unixware
sunos
Delete or create a file via rpc.statd, due to invalid information. NVD-CWE-Other
CVE-1999-0019 2008-09-9 21:33 1996-04-24 Show GitHub Exploit DB Packet Storm
351045 - muhammad_a._muquit wwwcount Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program. NVD-CWE-Other
CVE-1999-0021 2008-09-9 21:33 1997-11-5 Show GitHub Exploit DB Packet Storm
351046 - sgi
bsdi
freebsd
next
sun
irix
bsd_os
freebsd
nextstep
sunos
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option. NVD-CWE-Other
CVE-1999-0032 2008-09-9 21:33 1996-10-25 Show GitHub Exploit DB Packet Storm
351047 - sgi irix fsdump command in IRIX allows local users to obtain root access by modifying sensitive files. NVD-CWE-Other
CVE-1999-0044 2008-09-9 21:33 1996-12-3 Show GitHub Exploit DB Packet Storm
351048 - eric_allman
bsdi
caldera
sendmail
bsd_os
openlinux
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. NVD-CWE-Other
CVE-1999-0047 2008-09-9 21:33 1997-01-28 Show GitHub Exploit DB Packet Storm
351049 - debian
ibm
nec
netkit
aix
asl_ux_4800
ews-ux_v
up-ux_v
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges. NVD-CWE-Other
CVE-1999-0048 2008-09-9 21:33 1997-01-27 Show GitHub Exploit DB Packet Storm
351050 - eric_allman
freebsd
hp
ibm
sun
vacation
freebsd
hp-ux
vvos
aix
solaris
sunos
Vacation program allows command execution by remote users through a sendmail command. NVD-CWE-Other
CVE-1999-0057 2008-09-9 21:33 1998-11-16 Show GitHub Exploit DB Packet Storm