Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
521 5.5 警告
Local
レッドハット
gimp
Red Hat Enterprise Linux
gimp
gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-40916 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
522 7.1 重要
Local
レッドハット
gimp
Red Hat Enterprise Linux
gimp
gimp等の複数ベンダの製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-40917 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
523 5.5 警告
Local
レッドハット
gimp
Red Hat Enterprise Linux
gimp
gimp等の複数ベンダの製品におけるバッファサイズの計算の誤りに関する脆弱性 New CWE-131
正しくないバッファサイズ計算
CVE-2026-40918 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
524 5.5 警告
Local
レッドハット
gimp
Red Hat Enterprise Linux
gimp
gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-40919 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
525 5.9 警告
Network
opentelemetry opentelemetry opentelemetryにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-41078 2026-04-30 11:02 2026-04-23 Show GitHub Exploit DB Packet Storm
526 6.5 警告
Network
Apache Software Foundation Apache Storm Apache Software FoundationのApache Stormにおける認証に関する脆弱性 New CWE-287
不適切な認証
CVE-2026-41081 2026-04-30 11:02 2026-04-27 Show GitHub Exploit DB Packet Storm
527 7.5 重要
Network
SQLAlchemy mako SQLAlchemyのmakoにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-41205 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
528 7.8 重要
Local
Tommaso Bona (ParzivalHack) PySpector Tommaso Bona (ParzivalHack)のPySpectorにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト
CVE-2026-41206 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
529 6.1 警告
Network
cure53 DOMPurify cure53のDOMPurifyにおける複数の脆弱性 New CWE-183
CWE-79
CVE-2026-41240 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
530 5.4 警告
Network
pretalx pretalx pretalxにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-41241 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349011 - microsoft windows_nt Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters. NVD-CWE-Other
CVE-1999-1362 2008-09-6 05:19 1999-12-31 Show GitHub Exploit DB Packet Storm
349012 - microsoft windows_nt Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool. NVD-CWE-Other
CVE-1999-1363 2008-09-6 05:19 1999-12-31 Show GitHub Exploit DB Packet Storm
349013 - microsoft windows_nt Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext. NVD-CWE-Other
CVE-1999-1364 2008-09-6 05:19 1999-12-31 Show GitHub Exploit DB Packet Storm
349014 - matt_wright download.cgi Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. NVD-CWE-Other
CVE-1999-1377 2008-09-6 05:19 1999-09-9 Show GitHub Exploit DB Packet Storm
349015 - sun sunos passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. NVD-CWE-Other
CVE-1999-1388 2008-09-6 05:19 1994-05-13 Show GitHub Exploit DB Packet Storm
349016 - debian debian_linux suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line. NVD-CWE-Other
CVE-1999-1390 2008-09-6 05:19 1998-04-28 Show GitHub Exploit DB Packet Storm
349017 - next next Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions. NVD-CWE-Other
CVE-1999-1391 2008-09-6 05:19 1990-10-3 Show GitHub Exploit DB Packet Storm
349018 - next nex
next
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges. NVD-CWE-Other
CVE-1999-1392 2008-09-6 05:19 1990-10-3 Show GitHub Exploit DB Packet Storm
349019 - sun sunos Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash). NVD-CWE-Other
CVE-1999-1396 2008-09-6 05:19 1992-07-21 Show GitHub Exploit DB Packet Storm
349020 - sgi irix Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). NVD-CWE-Other
CVE-1999-1401 2008-09-6 05:19 1996-12-5 Show GitHub Exploit DB Packet Storm