Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3481 5.9 警告
Network 		opentelemetry opentelemetry opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-40182 2026-04-30 11:02 2026-04-23 Show GitHub Exploit DB Packet Storm
3482 9.9 緊急
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける大文字と小文字の区別の不適切な処理に関する脆弱性 CWE-178
大文字と小文字の区別の不適切な処理 		CVE-2026-40453 2026-04-30 11:02 2026-04-27 Show GitHub Exploit DB Packet Storm
3483 8.8 重要
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40473 2026-04-30 11:02 2026-04-27 Show GitHub Exploit DB Packet Storm
3484 8.8 重要
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40858 2026-04-30 11:02 2026-04-27 Show GitHub Exploit DB Packet Storm
3485 9.8 緊急
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40860 2026-04-30 11:02 2026-04-27 Show GitHub Exploit DB Packet Storm
3486 7.7 重要
Network 		argoproj Argo Workflows Argo Project AuthorsのArgo Workflowsにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-40886 2026-04-30 11:02 2026-04-23 Show GitHub Exploit DB Packet Storm
3487 5.3 警告
Adjacent 		opentelemetry opentelemetry opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-40891 2026-04-30 11:02 2026-04-23 Show GitHub Exploit DB Packet Storm
3488 7.8 重要
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40915 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
3489 5.5 警告
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-40916 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
3490 7.1 重要
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40917 2026-04-30 11:02 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348641 - microsoft internet_information_server By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. NVD-CWE-Other
CVE-1999-0407 2016-10-18 10:59 1999-02-9 Show GitHub Exploit DB Packet Storm
348642 - - - Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection. NVD-CWE-Other
CVE-1999-0418 2016-10-18 10:59 1999-03-8 Show GitHub Exploit DB Packet Storm
348643 - ibm lotus_notes The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference. NVD-CWE-Other
CVE-1999-0429 2016-10-18 10:59 1999-03-1 Show GitHub Exploit DB Packet Storm
348644 - netscape
sun 		communicator
navigator
java 		The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. NVD-CWE-Other
CVE-1999-0440 2016-10-18 10:59 1999-03-1 Show GitHub Exploit DB Packet Storm
348645 - tripwire tripwire Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames. NVD-CWE-Other
CVE-1999-0464 2016-10-18 10:59 1999-01-4 Show GitHub Exploit DB Packet Storm
348646 - selena_sol selena_sol_webstore An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. NVD-CWE-Other
CVE-1999-0604 2016-10-18 10:59 1999-04-20 Show GitHub Exploit DB Packet Storm
348647 - austin_contract_computing merchant_order_form An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. CWE-200
Information Exposure 		CVE-1999-0605 2016-10-18 10:59 1999-04-1 Show GitHub Exploit DB Packet Storm
348648 - seaside_enterprises ezmall An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information. CWE-200
Information Exposure 		CVE-1999-0606 2016-10-18 10:59 1999-04-1 Show GitHub Exploit DB Packet Storm
348649 - i-soft quikstore quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator passwor… NVD-CWE-Other
CVE-1999-0607 2016-10-18 10:59 1999-04-20 Show GitHub Exploit DB Packet Storm
348650 - mercantec softcart An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. NVD-CWE-Other
CVE-1999-0609 2016-10-18 10:59 1999-04-1 Show GitHub Exploit DB Packet Storm