Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1131 7.5 重要
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-42765 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1132 5.9 警告
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-42766 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1133 5.3 警告
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-42769 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1134 7.5 重要
Network
マイクロソフト Microsoft Windows 10 1607
Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft …
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 CWE-362
CWE-416
CWE-787
CVE-2026-42909 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1135 8.8 重要
Network
マイクロソフト Microsoft Windows 10 1607
Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft …
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 CWE-416
CWE-787
CVE-2026-42985 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1136 7.5 重要
Network
マイクロソフト Microsoft Windows 10 1607
Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft …
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-42992 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1137 7.5 重要
Network
マイクロソフト Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Wind…
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-42993 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1138 5.3 警告
Network
axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-113
CWE-1321
CVE-2026-44489 2026-06-16 13:37 2026-06-11 Show GitHub Exploit DB Packet Storm
1139 8.2 重要
Network
axios project axios axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)
CVE-2026-44490 2026-06-16 13:37 2026-06-11 Show GitHub Exploit DB Packet Storm
1140 8.2 重要
Network
KARASZI Istvan Tmp KARASZI IstvanのTmpにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-44705 2026-06-16 13:37 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254601 7.8 HIGH
Local
long_range_zip_project
debian
long_range_zip
debian_linux
The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified oth… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-8844 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254602 5.5 MEDIUM
Local
long_range_zip_project long_range_zip The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive. CWE-476
 NULL Pointer Dereference
CVE-2017-8843 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254603 5.5 MEDIUM
Local
long_range_zip_project long_range_zip The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted archive. CWE-369
 Divide By Zero
CVE-2017-8842 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254604 6.1 MEDIUM
Network
zen-cart zen_cart Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest… CWE-79
Cross-site Scripting
CVE-2017-8833 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254605 6.1 MEDIUM
Network
allen_disk_project allen_disk Allen Disk 1.6 has XSS in the id parameter to downfile.php. CWE-79
Cross-site Scripting
CVE-2017-8832 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254606 6.4 MEDIUM
Physics
linux
canonical
debian
linux_kernel
ubuntu_linux
debian_linux
The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly hav… CWE-125
Out-of-bounds Read
CVE-2017-8831 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254607 6.5 MEDIUM
Network
imagemagick imagemagick In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2017-8830 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254608 7.8 HIGH
Local
debian lintian Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a review of a source package with a crafted YAML file. CWE-502
 Deserialization of Untrusted Data
CVE-2017-8829 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254609 9.1 CRITICAL
Network
genixcms genixcms forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks vi… CWE-287
Improper Authentication
CVE-2017-8827 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm
254610 7.5 HIGH
Network
gnu glibc The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual… CWE-502
 Deserialization of Untrusted Data
CVE-2017-8804 2024-11-21 12:34 2017-05-8 Show GitHub Exploit DB Packet Storm