Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3171 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40477 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
3172 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40478 2026-04-27 10:47 2026-04-17 Show GitHub Exploit DB Packet Storm
3173 7.1 重要
Local 		Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-40599 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
3174 4.4 警告
Local 		Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-40604 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
3175 4.8 警告
Network 		mitmproxy mitmproxy mitmproxyにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-40606 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
3176 7.5 重要
Network 		coturn project coturn coturn projectのcoturnにおける不正な型変換に関する脆弱性 CWE-704
不正な型変換またはキャスト 		CVE-2026-40613 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
3177 8.8 重要
Network 		goshs goshs goshsにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40876 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
3178 7.5 重要
Network 		- NestJSにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-40879 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
3179 7.6 重要
Network 		openremote openremote openremoteにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2026-40882 2026-04-27 10:47 2026-04-22 Show GitHub Exploit DB Packet Storm
3180 8.3 重要
Network 		WWBN AVideo WWBNのAVideoにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-40925 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349931 - eric_allman
bsdi
caldera 		sendmail
bsd_os
openlinux 		MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. NVD-CWE-Other
CVE-1999-0047 2008-09-9 21:33 1997-01-28 Show GitHub Exploit DB Packet Storm
349932 - debian
ibm
nec 		netkit
aix
asl_ux_4800
ews-ux_v
up-ux_v 		Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges. NVD-CWE-Other
CVE-1999-0048 2008-09-9 21:33 1997-01-27 Show GitHub Exploit DB Packet Storm
349933 - eric_allman
freebsd
hp
ibm
sun 		vacation
freebsd
hp-ux
vvos
aix
solaris
sunos 		Vacation program allows command execution by remote users through a sendmail command. NVD-CWE-Other
CVE-1999-0057 2008-09-9 21:33 1998-11-16 Show GitHub Exploit DB Packet Storm
349934 - php php Buffer overflow in PHP cgi program, php.cgi allows shell access. NVD-CWE-Other
CVE-1999-0058 2008-09-9 21:33 1997-04-17 Show GitHub Exploit DB Packet Storm
349935 - openbsd openbsd The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. NVD-CWE-Other
CVE-1999-0062 2008-09-9 21:33 1998-08-3 Show GitHub Exploit DB Packet Storm
349936 - php php CGI PHP mylog script allows an attacker to read any file on the target server. NVD-CWE-Other
CVE-1999-0068 2008-09-9 21:33 1997-10-19 Show GitHub Exploit DB Packet Storm
349937 - washington_university wu-ftpd PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. NVD-CWE-Other
CVE-1999-0075 2008-09-9 21:33 1996-10-16 Show GitHub Exploit DB Packet Storm
349938 - ftp
ftpcd 		ftp
ftpcd 		CWD ~root command in ftpd allows root access. NVD-CWE-Other
CVE-1999-0082 2008-09-9 21:33 1988-11-11 Show GitHub Exploit DB Packet Storm
349939 - ibm aix Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. NVD-CWE-Other
CVE-1999-0087 2008-09-9 21:33 1998-02-1 Show GitHub Exploit DB Packet Storm
349940 - bsdi
freebsd
sco 		bsd_os
freebsd
internet_faststart
openserver 		Sendmail decode alias can be used to overwrite sensitive files. NVD-CWE-Other
CVE-1999-0096 2008-09-9 21:33 1996-12-10 Show GitHub Exploit DB Packet Storm