Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
461 6.2 警告
Local
アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web
アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性 New CWE-20
不適切な入力確認
CVE-2026-34688 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
462 7.1 重要
Adjacent
Linux Foundation automotive grade linux Linux FoundationのAutomotive Grade Linuxにおけるバッファオーバーリードの脆弱性 New CWE-126
バッファオーバーリード
CVE-2026-37532 2026-05-18 11:23 2026-05-1 Show GitHub Exploit DB Packet Storm
463 8.8 重要
Network
マイクロソフト Microsoft Data Formulator Microsoft Data Formulator のリモートでコードが実行される脆弱性 New CWE-94
コード・インジェクション
CVE-2026-41094 2026-05-18 11:22 2026-05-12 Show GitHub Exploit DB Packet Storm
464 9.1 緊急
Network
マイクロソフト Microsoft Confluence SAML SSO plugin
Microsoft JIRA SAML SSO plugin
Jira と Confluence 用の Microsoft SSO プラグインの特権昇格の脆弱性 New CWE-303
CWE-Other
CVE-2026-41103 2026-05-18 11:22 2026-05-12 Show GitHub Exploit DB Packet Storm
465 5.9 警告
Network
opentelemetry OpenTelemetry.Resources.Azure opentelemetryのOpenTelemetry.Resources.Azureにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-41483 2026-05-18 11:22 2026-05-6 Show GitHub Exploit DB Packet Storm
466 5.9 警告
Network
opentelemetry OpenTelemetry.Exporter.OneCollector opentelemetryのOpenTelemetry.Exporter.OneCollectorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-41484 2026-05-18 11:22 2026-05-6 Show GitHub Exploit DB Packet Storm
467 5.5 警告
Local
マイクロソフト Visual Studio Code - Live Preview extension マイクロソフトのVisual Studio Code - Live Preview extensionにおける複数の脆弱性 New CWE-22
CWE-22
CWE-23
CVE-2026-41612 2026-05-18 11:22 2026-05-12 Show GitHub Exploit DB Packet Storm
468 7.8 重要
Local
OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-43903 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
469 7.8 重要
Local
OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-43904 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
470 7.8 重要
Local
OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-43905 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353221 - cisco resource_manager Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community st… NVD-CWE-Other
CVE-1999-1042 2008-09-6 05:18 1999-12-31 Show GitHub Exploit DB Packet Storm
353222 - matt_wright formhandler.cgi Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to… NVD-CWE-Other
CVE-1999-1051 2008-09-6 05:18 1999-11-16 Show GitHub Exploit DB Packet Storm
353223 - apache
matt_wright
http_server
matt_wright_guestbook
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1… NVD-CWE-Other
CVE-1999-1053 2008-09-6 05:18 1999-09-13 Show GitHub Exploit DB Packet Storm
353224 - digital vms VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command. NVD-CWE-Other
CVE-1999-1057 2008-09-6 05:18 1990-10-25 Show GitHub Exploit DB Packet Storm
353225 - att svr4 Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands. NVD-CWE-Other
CVE-1999-1059 2008-09-6 05:18 1992-02-25 Show GitHub Exploit DB Packet Storm
353226 - xylogics annex Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter. NVD-CWE-Other
CVE-1999-1070 2008-09-6 05:18 1998-07-25 Show GitHub Exploit DB Packet Storm
353227 - ipswitch ws_ftp_pro WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges. NVD-CWE-Other
CVE-1999-1078 2008-09-6 05:18 1999-07-29 Show GitHub Exploit DB Packet Storm
353228 - bsd bsd Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing. NVD-CWE-Other
CVE-1999-1098 2008-09-6 05:18 1995-03-3 Show GitHub Exploit DB Packet Storm
353229 - sgi
apple
bsd
sun
irix
a_ux
bsd
sunos
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000… NVD-CWE-Other
CVE-1999-1102 2008-09-6 05:18 1999-12-31 Show GitHub Exploit DB Packet Storm
353230 - digital osf_1 dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter. NVD-CWE-Other
CVE-1999-1103 2008-09-6 05:18 1996-04-3 Show GitHub Exploit DB Packet Storm