Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1321 5.7 警告
Network 		オラクル PeopleSoft Enterprise CS Student Records オラクルのPeopleSoft Enterprise CS Student Recordsにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35241 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
1322 7.8 重要
Local 		オラクル Oracle Application Development Framework (Oracle ADF) オラクルのOracle Application Development Framework (Oracle ADF)におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35243 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
1323 7.5 重要
Network 		libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-35405 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
1324 8.2 重要
Network 		libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-35457 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
1325 8.8 重要
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35463 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
1326 5.3 警告
Network 		oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35483 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
1327 8.8 重要
Local 		NSA Emissary NSAのEmissaryにおける複数の脆弱性 CWE-116
CWE-78
CVE-2026-35582 2026-04-27 10:49 2026-04-18 Show GitHub Exploit DB Packet Storm
1328 6.5 警告
Network 		Vikunja Vikunja Vikunjaにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-35594 2026-04-27 10:48 2026-04-10 Show GitHub Exploit DB Packet Storm
1329 5.3 警告
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-37977 2026-04-27 10:48 2026-04-6 Show GitHub Exploit DB Packet Storm
1330 7.5 重要
Network 		Signal K Signal K Server Signal KのSignal K Serverにおける複数の脆弱性 CWE-1333
CWE-400
CVE-2026-39320 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314091 5.5 MEDIUM
Local 		lutel lutelwall LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. CWE-59
Link Following 		CVE-2005-1879 2024-01-27 02:01 2005-06-9 Show GitHub Exploit DB Packet Storm
314092 5.5 MEDIUM
Local 		everybuddy everybuddy everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. CWE-59
Link Following 		CVE-2005-1880 2024-01-27 02:00 2005-06-6 Show GitHub Exploit DB Packet Storm
314093 5.5 MEDIUM
Local 		mathopd mathopd The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dum… CWE-59
Link Following 		CVE-2005-0824 2024-01-27 02:00 2005-05-2 Show GitHub Exploit DB Packet Storm
314094 5.5 MEDIUM
Local 		joseph_allen joe Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes. CWE-59
Link Following 		CVE-2000-1178 2024-01-27 01:59 2001-01-9 Show GitHub Exploit DB Packet Storm
314095 5.5 MEDIUM
Local 		hp hp-ux HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messa… CWE-59
Link Following 		CVE-2000-0972 2024-01-27 01:56 2000-12-19 Show GitHub Exploit DB Packet Storm
314096 5.5 MEDIUM
Local 		perl perl Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file. CWE-59
Link Following 		CVE-1999-1386 2024-01-27 01:54 1999-12-31 Show GitHub Exploit DB Packet Storm
314097 5.5 MEDIUM
Local 		freebsd freebsd FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. CWE-59
Link Following 		CVE-1999-0783 2024-01-27 01:54 1998-06-16 Show GitHub Exploit DB Packet Storm
314098 - nextweb nextweb_\(i\)site NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.md… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2005-1835 2024-01-26 06:50 2005-06-1 Show GitHub Exploit DB Packet Storm
314099 7.5 HIGH
Network 		kde
debian 		kde
debian_linux 		The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and… CWE-281
 Improper Preservation of Permissions 		CVE-2005-1920 2024-01-26 06:11 2005-07-26 Show GitHub Exploit DB Packet Storm
314100 - baalsystems baal_smart_forms Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2004-2144 2024-01-26 06:11 2004-12-31 Show GitHub Exploit DB Packet Storm