Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1351 6.6 警告
Local
Saurabh Kumar python-dotenv Saurabh Kumarのpython-dotenvにおける複数の脆弱性 CWE-59
CWE-61
CVE-2026-28684 2026-04-28 10:11 2026-04-20 Show GitHub Exploit DB Packet Storm
1352 10 緊急
Network
Smallstep Step CA SmallstepのStep CAにおける複数の脆弱性 CWE-287
CWE-295
CWE-295
CVE-2026-30836 2026-04-28 10:11 2026-03-19 Show GitHub Exploit DB Packet Storm
1353 4.7 警告
Local
GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証
CVE-2026-32290 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1354 6.8 警告
Physics
GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-32291 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1355 7.5 重要
Network
GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-32292 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1356 3.7
Network
GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-32293 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
1357 6.5 警告
Network
オラクル PeopleSoft Enterprise FIN Contracts オラクルのPeopleSoft Enterprise FIN Contractsにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-34300 2026-04-28 10:11 2026-04-21 Show GitHub Exploit DB Packet Storm
1358 3.7
Network
Smallstep Step CA SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2026-40097 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
1359 8.2 重要
Network
Saltcorn Saltcorn Saltcornにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40163 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
1360 6.1 警告
Network
AdonisJS adonisjs/http-server
AdonisJS Core
AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-40255 2026-04-28 10:11 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350311 - sun sunos passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. NVD-CWE-Other
CVE-1999-1388 2008-09-6 05:19 1994-05-13 Show GitHub Exploit DB Packet Storm
350312 - debian debian_linux suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line. NVD-CWE-Other
CVE-1999-1390 2008-09-6 05:19 1998-04-28 Show GitHub Exploit DB Packet Storm
350313 - next next Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions. NVD-CWE-Other
CVE-1999-1391 2008-09-6 05:19 1990-10-3 Show GitHub Exploit DB Packet Storm
350314 - next nex
next
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges. NVD-CWE-Other
CVE-1999-1392 2008-09-6 05:19 1990-10-3 Show GitHub Exploit DB Packet Storm
350315 - sun sunos Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash). NVD-CWE-Other
CVE-1999-1396 2008-09-6 05:19 1992-07-21 Show GitHub Exploit DB Packet Storm
350316 - sgi irix Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). NVD-CWE-Other
CVE-1999-1401 2008-09-6 05:19 1996-12-5 Show GitHub Exploit DB Packet Storm
350317 - digital ultrix Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges. NVD-CWE-Other
CVE-1999-1415 2008-09-6 05:19 1991-08-23 Show GitHub Exploit DB Packet Storm
350318 - mirabilis icq_web_front ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("4… NVD-CWE-Other
CVE-1999-1418 2008-09-6 05:19 1999-05-1 Show GitHub Exploit DB Packet Storm
350319 - sun solstice_adminsuite Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table e… NVD-CWE-Other
CVE-1999-1424 2008-09-6 05:19 1997-11-10 Show GitHub Exploit DB Packet Storm
350320 - sun solstice_adminsuite Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files. NVD-CWE-Other
CVE-1999-1426 2008-09-6 05:19 1997-11-10 Show GitHub Exploit DB Packet Storm