Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2791 7.6 重要
Network 		WWBN AVideo WWBNのAVideoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-39369 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
2792 7.1 重要
Network 		WWBN AVideo WWBNのAVideoにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-39370 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
2793 7.8 重要
Local 		Vim Vim Vimにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-39881 2026-04-24 11:42 2026-04-8 Show GitHub Exploit DB Packet Storm
2794 5.3 警告
Network 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-39886 2026-04-24 11:42 2026-04-21 Show GitHub Exploit DB Packet Storm
2795 8.8 重要
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-39891 2026-04-24 11:42 2026-04-8 Show GitHub Exploit DB Packet Storm
2796 4.3 警告
Network 		lycheeorg lychee lycheeorgのLycheeにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-39957 2026-04-24 11:42 2026-04-9 Show GitHub Exploit DB Packet Storm
2797 9.6 緊急
Network 		MISP MISP MISPにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-39962 2026-04-24 11:42 2026-04-9 Show GitHub Exploit DB Packet Storm
2798 6.9 警告
Network 		s9y Serendipity s9yのSerendipityにおける検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 CWE-565
検証および完全性チェックを行っていない Cookie への依存 		CVE-2026-39963 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
2799 7.2 重要
Network 		s9y Serendipity s9yのSerendipityにおけるHTTP レスポンス分割に関する脆弱性 CWE-113
HTTP レスポンスの分割 		CVE-2026-39971 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
2800 7.1 重要
Local 		apktool apktool Apktoolにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-39973 2026-04-24 11:42 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352051 - next next Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions. NVD-CWE-Other
CVE-1999-1391 2008-09-6 05:19 1990-10-3 Show GitHub Exploit DB Packet Storm
352052 - next nex
next 		Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges. NVD-CWE-Other
CVE-1999-1392 2008-09-6 05:19 1990-10-3 Show GitHub Exploit DB Packet Storm
352053 - sun sunos Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash). NVD-CWE-Other
CVE-1999-1396 2008-09-6 05:19 1992-07-21 Show GitHub Exploit DB Packet Storm
352054 - sgi irix Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). NVD-CWE-Other
CVE-1999-1401 2008-09-6 05:19 1996-12-5 Show GitHub Exploit DB Packet Storm
352055 - digital ultrix Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges. NVD-CWE-Other
CVE-1999-1415 2008-09-6 05:19 1991-08-23 Show GitHub Exploit DB Packet Storm
352056 - mirabilis icq_web_front ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("4… NVD-CWE-Other
CVE-1999-1418 2008-09-6 05:19 1999-05-1 Show GitHub Exploit DB Packet Storm
352057 - sun solstice_adminsuite Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table e… NVD-CWE-Other
CVE-1999-1424 2008-09-6 05:19 1997-11-10 Show GitHub Exploit DB Packet Storm
352058 - sun solstice_adminsuite Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files. NVD-CWE-Other
CVE-1999-1426 2008-09-6 05:19 1997-11-10 Show GitHub Exploit DB Packet Storm
352059 - sun solstice_adminsuite Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges. NVD-CWE-Other
CVE-1999-1427 2008-09-6 05:19 1997-11-10 Show GitHub Exploit DB Packet Storm
352060 - sun solstice_adminsuite Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges. NVD-CWE-Other
CVE-1999-1428 2008-09-6 05:19 1997-11-10 Show GitHub Exploit DB Packet Storm