Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4511 8.8 重要
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-39891 2026-04-24 11:42 2026-04-8 Show GitHub Exploit DB Packet Storm
4512 4.3 警告
Network 		lycheeorg lychee lycheeorgのLycheeにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-39957 2026-04-24 11:42 2026-04-9 Show GitHub Exploit DB Packet Storm
4513 9.6 緊急
Network 		MISP MISP MISPにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-39962 2026-04-24 11:42 2026-04-9 Show GitHub Exploit DB Packet Storm
4514 6.9 警告
Network 		s9y Serendipity s9yのSerendipityにおける検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 CWE-565
検証および完全性チェックを行っていない Cookie への依存 		CVE-2026-39963 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
4515 7.2 重要
Network 		s9y Serendipity s9yのSerendipityにおけるHTTP レスポンス分割に関する脆弱性 CWE-113
HTTP レスポンスの分割 		CVE-2026-39971 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
4516 7.1 重要
Local 		apktool apktool Apktoolにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-39973 2026-04-24 11:42 2026-04-21 Show GitHub Exploit DB Packet Storm
4517 5.3 警告
Network 		Apache Software Foundation Apache log4net Apache Software FoundationのApache log4netにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-40021 2026-04-24 11:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4518 5.3 警告
Network 		Daniel Gatis Rembg Daniel GatisのRembgにおける複数の脆弱性 CWE-22
CWE-73
CVE-2026-40086 2026-04-24 11:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4519 5.4 警告
Network 		FUTO Immich FUTOのImmichにおける複数の脆弱性 CWE-601
CWE-79
CVE-2026-40096 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
4520 8.2 重要
Network 		XWiki xwiki XWikiのxwikiにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-40104 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349281 - microsoft outlook
outlook_express 		Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang. NVD-CWE-Other
CVE-1999-1164 2016-10-18 11:01 1999-06-25 Show GitHub Exploit DB Packet Storm
349282 - gnu fingerd GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) r… NVD-CWE-Other
CVE-1999-1165 2016-10-18 11:01 1999-07-21 Show GitHub Exploit DB Packet Storm
349283 - corel wordperfect Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working di… NVD-CWE-Other
CVE-1999-1173 2016-10-18 11:01 1998-12-18 Show GitHub Exploit DB Packet Storm
349284 - aaron_ledbetter
jidentd 		cidentd
jidentd 		Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script. NVD-CWE-Other
CVE-1999-1176 2016-10-18 11:01 1998-01-10 Show GitHub Exploit DB Packet Storm
349285 - delix
caldera
debian
lst
redhat
suse 		dld
openlinux_lite
debian_linux
lst_power_linux
linux
suse_linux 		Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.… NVD-CWE-Other
CVE-1999-1182 2016-10-18 11:01 1997-07-17 Show GitHub Exploit DB Packet Storm
349286 - todd_miller sudo sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. NVD-CWE-Other
CVE-1999-0958 2016-10-18 11:00 1998-01-12 Show GitHub Exploit DB Packet Storm
349287 - hp hp-ux HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation. NVD-CWE-Other
CVE-1999-0961 2016-10-18 11:00 1996-09-21 Show GitHub Exploit DB Packet Storm
349288 - sco unixware The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed. NVD-CWE-Other
CVE-1999-0979 2016-10-18 11:00 2000-04-11 Show GitHub Exploit DB Packet Storm
349289 - netscape communicator Netscape Navigator uses weak encryption for storing a user's Netscape mail password. NVD-CWE-Other
CVE-1999-1002 2016-10-18 11:00 2000-01-12 Show GitHub Exploit DB Packet Storm
349290 - netscape
novell 		enterprise_server
groupwise 		Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter. NVD-CWE-Other
CVE-1999-1005 2016-10-18 11:00 1999-12-19 Show GitHub Exploit DB Packet Storm