Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1251 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-23415 2026-04-27 10:52 2026-04-2 Show GitHub Exploit DB Packet Storm
1252 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23416 2026-04-27 10:52 2026-04-2 Show GitHub Exploit DB Packet Storm
1253 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23417 2026-04-27 10:52 2026-04-2 Show GitHub Exploit DB Packet Storm
1254 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-23418 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
1255 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2026-23419 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
1256 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2026-23420 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
1257 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23421 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
1258 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-23422 2026-04-27 10:52 2026-04-3 Show GitHub Exploit DB Packet Storm
1259 5.7 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows 仮想化ベース セキュリティ (VBS) のセキュリティ機能バイパスの脆弱性 CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-23670 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
1260 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind… 		AppLocker フィルター ドライバー (applockerfltr.sys) の特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-25184 2026-04-27 10:52 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314091 5.5 MEDIUM
Local 		lutel lutelwall LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. CWE-59
Link Following 		CVE-2005-1879 2024-01-27 02:01 2005-06-9 Show GitHub Exploit DB Packet Storm
314092 5.5 MEDIUM
Local 		everybuddy everybuddy everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. CWE-59
Link Following 		CVE-2005-1880 2024-01-27 02:00 2005-06-6 Show GitHub Exploit DB Packet Storm
314093 5.5 MEDIUM
Local 		mathopd mathopd The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dum… CWE-59
Link Following 		CVE-2005-0824 2024-01-27 02:00 2005-05-2 Show GitHub Exploit DB Packet Storm
314094 5.5 MEDIUM
Local 		joseph_allen joe Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes. CWE-59
Link Following 		CVE-2000-1178 2024-01-27 01:59 2001-01-9 Show GitHub Exploit DB Packet Storm
314095 5.5 MEDIUM
Local 		hp hp-ux HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messa… CWE-59
Link Following 		CVE-2000-0972 2024-01-27 01:56 2000-12-19 Show GitHub Exploit DB Packet Storm
314096 5.5 MEDIUM
Local 		perl perl Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file. CWE-59
Link Following 		CVE-1999-1386 2024-01-27 01:54 1999-12-31 Show GitHub Exploit DB Packet Storm
314097 5.5 MEDIUM
Local 		freebsd freebsd FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. CWE-59
Link Following 		CVE-1999-0783 2024-01-27 01:54 1998-06-16 Show GitHub Exploit DB Packet Storm
314098 - nextweb nextweb_\(i\)site NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.md… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2005-1835 2024-01-26 06:50 2005-06-1 Show GitHub Exploit DB Packet Storm
314099 7.5 HIGH
Network 		kde
debian 		kde
debian_linux 		The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and… CWE-281
 Improper Preservation of Permissions 		CVE-2005-1920 2024-01-26 06:11 2005-07-26 Show GitHub Exploit DB Packet Storm
314100 - baalsystems baal_smart_forms Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2004-2144 2024-01-26 06:11 2004-12-31 Show GitHub Exploit DB Packet Storm