Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1031 8.3 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-11682 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
1032 8.1 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-11689 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
1033 7.8 重要
Local
シスコシステムズ Cisco SD-WAN vSmart Controller シスコシステムズのCisco Catalyst SD-WAN Manager等の複数製品におけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ
CVE-2026-20245 2026-06-11 16:13 2026-06-4 Show GitHub Exploit DB Packet Storm
1034 6.1 警告
Network
Apache Software Foundation answer Apache Software Foundationのanswerにおける代替 XSS 構文の不適切な無効化に関する脆弱性 CWE-87
代替 XSS 構文の不適切な無効化
CVE-2026-25688 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
1035 6.1 警告
Network
Apache Software Foundation answer Apache Software Foundationのanswerにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい
CVE-2026-25699 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
1036 6.5 警告
Network
Apache Software Foundation answer Apache Software Foundationのanswerにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2026-33582 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
1037 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Windows Server 2016
Microsoft Wind…
Windows デバイス正常性構成証明 (DHA) の特権昇格の脆弱性 CWE-501
信頼境界線の違反
CVE-2026-33828 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
1038 - - シーメンス (複数の製品) Siemens製品に対するアップデート(2026年6月) - - 2026-06-11 11:56 2026-06-3 Show GitHub Exploit DB Packet Storm
1039 - - (複数のベンダ) (複数の製品) CISA ICS Advisory / ICS Medical Advisory(2026年06月09日) - - 2026-06-11 11:51 2026-06-10 Show GitHub Exploit DB Packet Storm
1040 - - (複数のベンダ) (複数の製品) Apache HTTP Server 2.4における複数の脆弱性に対するアップデート(2026年6月8日) - - 2026-06-10 15:30 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255061 5.5 MEDIUM
Local
gnome libcroco The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file. CWE-125
Out-of-bounds Read
CVE-2017-7960 2024-11-21 12:33 2017-04-20 Show GitHub Exploit DB Packet Storm
255062 7.8 HIGH
Local
artifex ghostscript Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified o… CWE-190
 Integer Overflow or Wraparound
CVE-2017-7948 2024-11-21 12:33 2017-04-19 Show GitHub Exploit DB Packet Storm
255063 7.8 HIGH
Local
gnome libcroco The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attacker… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-7961 2024-11-21 12:33 2017-04-20 Show GitHub Exploit DB Packet Storm
255064 5.5 MEDIUM
Local
radare radare2 The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file. CWE-416
 Use After Free
CVE-2017-7946 2024-11-21 12:33 2017-04-19 Show GitHub Exploit DB Packet Storm
255065 6.5 MEDIUM
Network
imagemagick
debian
imagemagick
debian_linux
The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2017-7943 2024-11-21 12:33 2017-04-19 Show GitHub Exploit DB Packet Storm
255066 6.5 MEDIUM
Network
imagemagick imagemagick The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2017-7942 2024-11-21 12:33 2017-04-19 Show GitHub Exploit DB Packet Storm
255067 6.5 MEDIUM
Network
imagemagick
debian
imagemagick
debian_linux
The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2017-7941 2024-11-21 12:33 2017-04-19 Show GitHub Exploit DB Packet Storm
255068 5.5 MEDIUM
Local
entropymine imageworsener The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file. CWE-400
 Uncontrolled Resource Consumption
CVE-2017-7940 2024-11-21 12:33 2017-04-19 Show GitHub Exploit DB Packet Storm
255069 5.5 MEDIUM
Local
entropymine imageworsener The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted file. CWE-125
Out-of-bounds Read
CVE-2017-7939 2024-11-21 12:33 2017-04-19 Show GitHub Exploit DB Packet Storm
255070 3.5 LOW
Network
redhat openshift An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProjec… - CVE-2017-7517 2024-11-21 12:32 2022-10-18 Show GitHub Exploit DB Packet Storm