Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2911 5.4 警告
Network
wger wger wger Projectのwgerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-40353 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2912 7.6 重要
Network
wger wger wger Projectのwgerにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-40474 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2913 9 緊急
Network
Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40477 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2914 9 緊急
Network
Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40478 2026-04-27 10:47 2026-04-17 Show GitHub Exploit DB Packet Storm
2915 7.1 重要
Local
Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-40599 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
2916 4.4 警告
Local
Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-40604 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
2917 4.8 警告
Network
mitmproxy mitmproxy mitmproxyにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション
CVE-2026-40606 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
2918 7.5 重要
Network
coturn project coturn coturn projectのcoturnにおける不正な型変換に関する脆弱性 CWE-704
不正な型変換またはキャスト
CVE-2026-40613 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
2919 8.8 重要
Network
goshs goshs goshsにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40876 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
2920 7.5 重要
Network
- NestJSにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-40879 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349111 - sgi irix IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option. NVD-CWE-Other
CVE-1999-0960 2008-09-9 21:36 1998-03-20 Show GitHub Exploit DB Packet Storm
349112 - hp hp-ux Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option. NVD-CWE-Other
CVE-1999-0962 2008-09-9 21:36 1997-05-14 Show GitHub Exploit DB Packet Storm
349113 - freebsd freebsd FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. NVD-CWE-Other
CVE-1999-0963 2008-09-9 21:36 1999-12-1 Show GitHub Exploit DB Packet Storm
349114 - freebsd freebsd Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. NVD-CWE-Other
CVE-1999-0964 2008-09-9 21:36 2000-01-1 Show GitHub Exploit DB Packet Storm
349115 - university_of_cambridge exim Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file. NVD-CWE-Other
CVE-1999-0971 2008-09-9 21:36 1997-07-22 Show GitHub Exploit DB Packet Storm
349116 - wolfpack_development xshipwars Buffer overflow in Xshipwars xsw program. NVD-CWE-Other
CVE-1999-0972 2008-09-9 21:36 1999-12-9 Show GitHub Exploit DB Packet Storm
349117 - microsoft windows_95
windows_98
windows_nt
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands… NVD-CWE-Other
CVE-1999-0975 2008-09-9 21:36 1999-12-10 Show GitHub Exploit DB Packet Storm
349118 - eric_allman sendmail Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. NVD-CWE-Other
CVE-1999-0976 2008-09-9 21:36 1999-12-7 Show GitHub Exploit DB Packet Storm
349119 - debian debian_linux htdig allows remote attackers to execute commands via filenames with shell metacharacters. NVD-CWE-Other
CVE-1999-0978 2008-09-9 21:36 1999-12-9 Show GitHub Exploit DB Packet Storm
349120 - debian
linux
redhat
debian_linux
linux_kernel
linux
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. NVD-CWE-Other
CVE-1999-0986 2008-09-9 21:36 1999-12-8 Show GitHub Exploit DB Packet Storm