Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2481 6.5 警告
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおける複数の脆弱性 CWE-285
CWE-639
CVE-2026-34370 2026-04-24 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
2482 8.1 重要
Network 		nginxui nginx ui Nginx UI TeamのNginx UIにおける WebSocket でのオリジン検証の欠如に関する脆弱性 CWE-1385
WebSocket でのオリジン検証の欠如 		CVE-2026-34403 2026-04-24 11:28 2026-04-20 Show GitHub Exploit DB Packet Storm
2483 3.5 低
Physics 		oauth2_proxy project oauth2_proxy oauth2_proxy projectのoauth2_proxyにおける複数の脆弱性 CWE-384
CWE-613
CVE-2026-34454 2026-04-24 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
2484 7.5 重要
Network 		Stig (stigtsp) Net::CIDR::Lite Stig (stigtsp)のNet::CIDR::Liteにおける入力の構文的正当性の検証に関する脆弱性 CWE-1286
入力の構文的正当性の不適切な検証 		CVE-2026-40198
CVE-2026-40199 		2026-04-23 17:52 2026-04-10 Show GitHub Exploit DB Packet Storm
2485 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月21日） - - 2026-04-23 17:41 2026-04-22 Show GitHub Exploit DB Packet Storm
2486 8.8 重要
Network 		サイレックス・テクノロジー株式会社 SD-330AC
AMC Manager 		サイレックス・テクノロジー製SD-330ACおよびAMC Managerにおける複数の脆弱性 CWE-1188
CWE-121
CWE-122
CWE-1395
CWE-226
CWE-266
CWE-306
CWE-321
CWE-327
CWE-79
CWE-93
CVE-2015-5621
CVE-2024-24487
CVE-2026-32955
CVE-2026-32956
CVE-2026-32957
CVE-2026-32958
CVE-2026-32959
CVE-2026-32960
CVE-2026-32961
CVE-2026-32962
CVE-2026-32963
CV… 		2026-04-23 17:36 2026-04-20 Show GitHub Exploit DB Packet Storm
2487 7.5 重要
Network 		株式会社GROWI GROWI GROWIにおける、正規表現を用いたサービス運用妨害（ReDoS）の脆弱性 CWE-Other
その他 		CVE-2026-41040 2026-04-23 15:16 2026-04-23 Show GitHub Exploit DB Packet Storm
2488 8.8 重要
Network 		一般社団法人 JPCERT コーディネーションセンター LogonTracer LogonTracerにおける複数の脆弱性 CWE-78
CWE-Other
CVE-2026-33277
CVE-2026-33566 		2026-04-23 14:12 2026-04-23 Show GitHub Exploit DB Packet Storm
2489 7.3 重要
Local 		i-PRO株式会社 IP簡単設定ソフトウェア i-PRO製IP簡単設定ソフトウェアにおけるDLL読み込みに関する脆弱性 CWE-Other
その他 		CVE-2026-34488 2026-04-23 12:21 2026-04-23 Show GitHub Exploit DB Packet Storm
2490 4.7 警告
Network 		彼方株式会社 CMS ALAYA CMS ALAYAにおけるSQLインジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40529 2026-04-23 12:07 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314941 4.7 MEDIUM
Local 		gnu
debian
canonical 		cpio
debian_linux
ubuntu_linux 		Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cp… CWE-59
CWE-367
Link Following
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2005-1111 2024-01-27 02:07 2005-05-2 Show GitHub Exploit DB Packet Storm
314942 5.5 MEDIUM
Local 		gentoo linux
portage 		Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles. CWE-59
Link Following 		CVE-2004-1901 2024-01-27 02:07 2004-12-31 Show GitHub Exploit DB Packet Storm
314943 5.5 MEDIUM
Local 		cpanel cpanel cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions … CWE-59
Link Following 		CVE-2004-1603 2024-01-27 02:06 2004-10-18 Show GitHub Exploit DB Packet Storm
314944 7.1 HIGH
Local 		kde
debian 		kde
debian_linux 		KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files. CWE-59
Link Following 		CVE-2004-0689 2024-01-27 02:06 2004-09-28 Show GitHub Exploit DB Packet Storm
314945 5.5 MEDIUM
Local 		ekg_project
debian 		ekg
debian_linux 		linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files. CWE-59
Link Following 		CVE-2005-1916 2024-01-27 02:01 2005-07-6 Show GitHub Exploit DB Packet Storm
314946 5.5 MEDIUM
Local 		lutel lutelwall LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. CWE-59
Link Following 		CVE-2005-1879 2024-01-27 02:01 2005-06-9 Show GitHub Exploit DB Packet Storm
314947 5.5 MEDIUM
Local 		everybuddy everybuddy everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. CWE-59
Link Following 		CVE-2005-1880 2024-01-27 02:00 2005-06-6 Show GitHub Exploit DB Packet Storm
314948 5.5 MEDIUM
Local 		mathopd mathopd The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dum… CWE-59
Link Following 		CVE-2005-0824 2024-01-27 02:00 2005-05-2 Show GitHub Exploit DB Packet Storm
314949 5.5 MEDIUM
Local 		joseph_allen joe Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes. CWE-59
Link Following 		CVE-2000-1178 2024-01-27 01:59 2001-01-9 Show GitHub Exploit DB Packet Storm
314950 5.5 MEDIUM
Local 		hp hp-ux HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messa… CWE-59
Link Following 		CVE-2000-0972 2024-01-27 01:56 2000-12-19 Show GitHub Exploit DB Packet Storm