Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2781	4.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows 回復環境のセキュリティ機能バイパスの脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-20928	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

2782	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 10 1809 Microsoft Windows 10 22h2 Microsoft Wind…	Windows Management サービスの特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-20930	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

2783	6	警告 Local	オラクル	JDK JRE Oracle GraalVM	オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22003	2026-04-27 11:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

2784	3.7	低 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-22746	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2785	8.1	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるホストの不一致による証明書の検証に関する脆弱性	CWE-297 ホストの不一致による証明書の不適切な検証	CVE-2026-22747	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2786	6.5	警告 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-22748	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2787	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-22753	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2788	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-22754	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

2789	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23344	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2790	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23345	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347801	-	qualcomm	eudora eudora_light	Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divi…	NVD-CWE-Other	CVE-1999-1448	2016-10-18 11:04	1998-07-29	Show	GitHub Exploit DB Packet Storm

347802	-	macromedia	matrix_screen_saver	Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC …	NVD-CWE-Other	CVE-1999-1454	2016-10-18 11:04	1999-10-4	Show	GitHub Exploit DB Packet Storm

347803	-	bmc	patrol_agent	BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program.	NVD-CWE-Other	CVE-1999-1460	2016-10-18 11:04	1999-07-13	Show	GitHub Exploit DB Packet Storm

347804	-	sgi	irix	inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the P…	NVD-CWE-Other	CVE-1999-1461	2016-10-18 11:04	1997-05-7	Show	GitHub Exploit DB Packet Storm

347805	-	hughes_technologies	w3-auth	Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.	NVD-CWE-Other	CVE-1999-1469	2016-10-18 11:04	1999-09-30	Show	GitHub Exploit DB Packet Storm

347806	-	redhat	linux	xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.	NVD-CWE-Other	CVE-1999-1490	2016-10-18 11:04	1998-05-28	Show	GitHub Exploit DB Packet Storm

347807	-	redhat	linux	abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.	NVD-CWE-Other	CVE-1999-1491	2016-10-18 11:04	1996-02-2	Show	GitHub Exploit DB Packet Storm

347808	-	redhat	linux	gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.	NVD-CWE-Other	CVE-1999-1332	2016-10-18 11:03	1999-12-31	Show	GitHub Exploit DB Packet Storm

347809	-	redhat	linux	automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to b…	NVD-CWE-Other	CVE-1999-1333	2016-10-18 11:03	1999-12-31	Show	GitHub Exploit DB Packet Storm

347810	-	elm_development_group	elm	Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command…	NVD-CWE-Other	CVE-1999-1334	2016-10-18 11:03	1999-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed