Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2511 9.1 緊急
Network 		PowerDNS dnsdist PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-33598 2026-04-27 10:50 2026-04-22 Show GitHub Exploit DB Packet Storm
2512 8.1 重要
Adjacent 		PowerDNS dnsdist PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-33599 2026-04-27 10:50 2026-04-22 Show GitHub Exploit DB Packet Storm
2513 8.2 重要
Network 		PowerDNS dnsdist PowerDNSのdnsdistにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-33602 2026-04-27 10:50 2026-04-22 Show GitHub Exploit DB Packet Storm
2514 10 緊急
Network 		Flatpak Flatpak FlatpakにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-34078 2026-04-27 10:50 2026-04-7 Show GitHub Exploit DB Packet Storm
2515 9.1 緊急
Network 		- オラクルのEnterprise Manager Base Platformにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-34279 2026-04-27 10:50 2026-04-21 Show GitHub Exploit DB Packet Storm
2516 4.7 警告
Network 		オラクル Oracle Applications Framework オラクルのOracle Applications Frameworkにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34298 2026-04-27 10:50 2026-04-21 Show GitHub Exploit DB Packet Storm
2517 6.5 警告
Network 		オラクル PeopleSoft Enterprise FIN Maintenance Management オラクルのPeopleSoft Enterprise FIN Maintenance Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34299 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2518 6.5 警告
Network 		オラクル PeopleSoft Enterprise FIN Maintenance Management オラクルのPeopleSoft Enterprise FIN Maintenance Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34301 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2519 5.5 警告
Network 		オラクル Oracle Workflow オラクルのOracle Workflowにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34302 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2520 7.5 重要
Network 		オラクル Oracle WebLogic Server オラクルのOracle WebLogic Serverにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34305 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315791 7.8 HIGH
Local 		oracle mysql Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini ini… CWE-120
Classic Buffer Overflow 		CVE-2002-0969 2024-01-27 02:19 2002-10-11 Show GitHub Exploit DB Packet Storm
315792 5.5 MEDIUM
Local 		blackberry qnx_neutrino_real-time_operating_system Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d ar… CWE-59
Link Following 		CVE-2002-0793 2024-01-27 02:18 2002-08-12 Show GitHub Exploit DB Packet Storm
315793 5.5 MEDIUM
Local 		kernel
avaya 		util-linux
cvlan
interactive_response
integrated_management_suit
intuity_lx
message_networking
messaging_storage_server 		script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root ex… CWE-59
Link Following 		CVE-2001-1494 2024-01-27 02:16 2001-12-31 Show GitHub Exploit DB Packet Storm
315794 7.1 HIGH
Local 		microsoft windows_nt The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock net… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2001-0006 2024-01-27 02:08 2001-02-12 Show GitHub Exploit DB Packet Storm
315795 4.7 MEDIUM
Local 		gnu
debian
canonical 		cpio
debian_linux
ubuntu_linux 		Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cp… CWE-59
CWE-367
Link Following
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2005-1111 2024-01-27 02:07 2005-05-2 Show GitHub Exploit DB Packet Storm
315796 5.5 MEDIUM
Local 		gentoo linux
portage 		Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles. CWE-59
Link Following 		CVE-2004-1901 2024-01-27 02:07 2004-12-31 Show GitHub Exploit DB Packet Storm
315797 5.5 MEDIUM
Local 		cpanel cpanel cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions … CWE-59
Link Following 		CVE-2004-1603 2024-01-27 02:06 2004-10-18 Show GitHub Exploit DB Packet Storm
315798 7.1 HIGH
Local 		kde
debian 		kde
debian_linux 		KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files. CWE-59
Link Following 		CVE-2004-0689 2024-01-27 02:06 2004-09-28 Show GitHub Exploit DB Packet Storm
315799 5.5 MEDIUM
Local 		ekg_project
debian 		ekg
debian_linux 		linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files. CWE-59
Link Following 		CVE-2005-1916 2024-01-27 02:01 2005-07-6 Show GitHub Exploit DB Packet Storm
315800 5.5 MEDIUM
Local 		lutel lutelwall LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. CWE-59
Link Following 		CVE-2005-1879 2024-01-27 02:01 2005-06-9 Show GitHub Exploit DB Packet Storm