Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3211 6.3 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態
CVE-2026-35356 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
3212 4.4 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける複数の脆弱性 CWE-281
CWE-459
CVE-2026-35361 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
3213 3.6
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態
CVE-2026-35362 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
3214 8.1 重要
Network
OpenBSD OpenSSH OpenBSDのOpenSSHにおけるパーミッションの不適切な保持に関する脆弱性 CWE-281
パーミッションの不適切な保持
CVE-2026-35385 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
3215 8.1 重要
Network
OpenBSD OpenSSH OpenBSDのOpenSSHにおける不適切な動作順序に関する脆弱性 CWE-696
不適切な動作順序
CVE-2026-35386 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
3216 6.5 警告
Network
OpenBSD OpenSSH OpenBSDのOpenSSHにおける常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装
CVE-2026-35387 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
3217 2.5
Local
OpenBSD OpenSSH OpenBSDのOpenSSHにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル
CVE-2026-35388 2026-04-28 10:12 2026-04-2 Show GitHub Exploit DB Packet Storm
3218 8.8 重要
Network
neutrinolabs xrdp neutrinolabsのxrdpにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-35512 2026-04-28 10:12 2026-04-17 Show GitHub Exploit DB Packet Storm
3219 4.3 警告
Network
Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおけるアクセス制御の不十分な粒度に関する脆弱性 CWE-1220
アクセス制御の不十分な粒度
CVE-2026-38743 2026-04-28 10:12 2026-04-24 Show GitHub Exploit DB Packet Storm
3220 7.7 重要
Network
Lee Peuker Movary Lee PeukerのMovaryにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-40348 2026-04-28 10:12 2026-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350331 - eric_allman sendmail Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. NVD-CWE-Other
CVE-1999-0976 2008-09-9 21:36 1999-12-7 Show GitHub Exploit DB Packet Storm
350332 - debian debian_linux htdig allows remote attackers to execute commands via filenames with shell metacharacters. NVD-CWE-Other
CVE-1999-0978 2008-09-9 21:36 1999-12-9 Show GitHub Exploit DB Packet Storm
350333 - debian
linux
redhat
debian_linux
linux_kernel
linux
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. NVD-CWE-Other
CVE-1999-0986 2008-09-9 21:36 1999-12-8 Show GitHub Exploit DB Packet Storm
350334 - microsoft ie Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol. NVD-CWE-Other
CVE-1999-0989 2008-09-9 21:36 1999-12-6 Show GitHub Exploit DB Packet Storm
350335 - goodtech telnet_server_nt Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name. NVD-CWE-Other
CVE-1999-0991 2008-09-9 21:36 1999-12-6 Show GitHub Exploit DB Packet Storm
350336 - infoseek ultraseek_server Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request. NVD-CWE-Other
CVE-1999-0996 2008-09-9 21:36 1999-12-15 Show GitHub Exploit DB Packet Storm
350337 - sgi irix Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise. NVD-CWE-Other
CVE-1999-1039 2008-09-9 21:36 1998-05-27 Show GitHub Exploit DB Packet Storm
350338 - webmin webmin Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking. NVD-CWE-Other
CVE-1999-1074 2008-09-9 21:36 1999-12-31 Show GitHub Exploit DB Packet Storm
350339 - kab_software lydia Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges. NVD-CWE-Other
CVE-1999-1101 2008-09-9 21:36 1999-02-19 Show GitHub Exploit DB Packet Storm
350340 - hp openmail HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests. NVD-CWE-Other
CVE-1999-0551 2008-09-9 21:35 1998-04-1 Show GitHub Exploit DB Packet Storm