Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6461 7.3 重要
Network 		ShadowCloneLabs Glutamate MCP Servers ShadowCloneLabsのGlutamate MCP Serversにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-7094 2026-05-7 12:00 2026-04-27 Show GitHub Exploit DB Packet Storm
6462 5.4 警告
Network 		helpy.io helpy helpy.ioのhelpyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40229 2026-05-7 12:00 2026-04-29 Show GitHub Exploit DB Packet Storm
6463 5.4 警告
Network 		helpy.io helpy helpy.ioのhelpyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40230 2026-05-7 12:00 2026-04-29 Show GitHub Exploit DB Packet Storm
6464 7.5 重要
Network 		Exim Development Exim Exim DevelopmentのEximにおける指定された機能の不適切な提供に関する脆弱性 CWE-684
指定された機能の不適切な提供 		CVE-2026-40684 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
6465 9.8 緊急
Network 		Exim Development Exim Exim DevelopmentのEximにおける複数の脆弱性 CWE-684
CWE-787
CVE-2026-40685 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
6466 5.3 警告
Network 		Exim Development Exim Exim DevelopmentのEximにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40686 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
6467 9.1 緊急
Network 		Exim Development Exim Exim DevelopmentのEximにおけるリソースの初期化の不備に関する脆弱性 CWE-909
リソースの初期化の不備 		CVE-2026-40687 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
6468 6.5 警告
Network 		The Prosody Team Prosody The Prosody TeamのProsodyにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-43504 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6469 6.5 警告
Network 		The Prosody Team Prosody The Prosody TeamのProsodyにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル 		CVE-2026-43505 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6470 7.5 重要
Network 		The Prosody Team Prosody The Prosody TeamのProsodyにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43506 2026-05-7 11:59 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354811 - microsoft index_server Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physic… NVD-CWE-Other
CVE-1999-1397 2016-10-18 11:04 1999-03-23 Show GitHub Exploit DB Packet Storm
354812 - sgi irix Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. NVD-CWE-Other
CVE-1999-1398 2016-10-18 11:04 1997-05-7 Show GitHub Exploit DB Packet Storm
354813 - sgi irix spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed. NVD-CWE-Other
CVE-1999-1399 2016-10-18 11:04 1997-08-20 Show GitHub Exploit DB Packet Storm
354814 - the_economist the_economist_1999_screen_saver The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer wh… NVD-CWE-Other
CVE-1999-1400 2016-10-18 11:04 1999-06-3 Show GitHub Exploit DB Packet Storm
354815 - ibm aix snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users … NVD-CWE-Other
CVE-1999-1405 2016-10-18 11:04 1999-02-17 Show GitHub Exploit DB Packet Storm
354816 - ibm aix Fixed in AIX 4.3 and 4.3.2 AIX 4.3.x APAR: IX88263 AIX 4.2.x APAR: IX88261 NVD-CWE-Other
CVE-1999-1405 2016-10-18 11:04 1999-02-17 Show GitHub Exploit DB Packet Storm
354817 - redhat linux dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel. NVD-CWE-Other
CVE-1999-1406 2016-10-18 11:04 1998-07-29 Show GitHub Exploit DB Packet Storm
354818 - redhat linux ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file. NVD-CWE-Other
CVE-1999-1407 2016-10-18 11:04 1998-03-9 Show GitHub Exploit DB Packet Storm
354819 - hp
ibm 		hp-ux
aix 		Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the sock… NVD-CWE-Other
CVE-1999-1408 2016-10-18 11:04 1997-03-5 Show GitHub Exploit DB Packet Storm
354820 - sgi
netbsd 		irix
netbsd 		The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that a… NVD-CWE-Other
CVE-1999-1409 2016-10-18 11:04 1998-07-3 Show GitHub Exploit DB Packet Storm