Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1171 | 8.8 |
重要
Network |
マイクロソフト |
Microsoft Windows 10 1607 Microsoft Windows 10 21h2 Microsoft Windows Server 2025 Microsoft Windows Server 2019 Microsoft … |
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 |
CWE-416 CWE-787 |
CVE-2026-42985 | 2026-06-16 13:37 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 1172 | 7.5 |
重要
Network |
マイクロソフト |
Microsoft Windows 10 1607 Microsoft Windows 10 21h2 Microsoft Windows Server 2025 Microsoft Windows Server 2019 Microsoft … |
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 |
CWE-122
ヒープオーバーフロー |
CVE-2026-42992 | 2026-06-16 13:37 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 1173 | 7.5 |
重要
Network |
マイクロソフト |
Microsoft Windows 10 21h2 Microsoft Windows Server 2025 Microsoft Windows 11 24h2 Microsoft Windows 11 26h1 Microsoft Wind… |
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 |
CWE-122
ヒープオーバーフロー |
CVE-2026-42993 | 2026-06-16 13:37 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 1174 | 5.3 |
警告
Network |
axios project | axios | axios projectのaxiosにおける複数の脆弱性 |
CWE-113 CWE-1321 |
CVE-2026-44489 | 2026-06-16 13:37 | 2026-06-11 | Show | GitHub Exploit DB Packet Storm |
| 1175 | 8.2 |
重要
Network |
axios project | axios | axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 |
CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) |
CVE-2026-44490 | 2026-06-16 13:37 | 2026-06-11 | Show | GitHub Exploit DB Packet Storm |
| 1176 | 8.2 |
重要
Network |
KARASZI Istvan | Tmp | KARASZI IstvanのTmpにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-44705 | 2026-06-16 13:37 | 2026-06-11 | Show | GitHub Exploit DB Packet Storm |
| 1177 | 7.5 |
重要
Network |
マイクロソフト |
Microsoft Windows 10 1607 Microsoft Windows 10 21h2 Microsoft Windows Server 2025 Microsoft Windows Server 2019 Microsoft … |
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 |
CWE-122
ヒープオーバーフロー |
CVE-2026-44799 | 2026-06-16 13:37 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 1178 | 5.3 |
警告
Network |
kjd | internationalized domain names in applications | kjdのinternationalized domain names in applicationsにおける非効率的な正規表現の複雑さに関する脆弱性 |
CWE-1333
非効率的な正規表現の複雑さ |
CVE-2026-45409 | 2026-06-16 13:37 | 2026-06-5 | Show | GitHub Exploit DB Packet Storm |
| 1179 | 4.3 |
警告
Network |
マイクロソフト | Bing | Microsoft Bing Search のなりすましの脆弱性 |
CWE-451
ユーザインターフェースにおける重要情報の誤った表示 |
CVE-2026-45650 | 2026-06-16 13:37 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 1180 | 5.4 |
警告
Network |
nuxt | nuxt | NuxtにおけるWeb ページの属性に対するスクリプトの不適切な無害化に関する脆弱性 |
CWE-83
Web ページの属性に対するスクリプトの不適切な無害化 |
CVE-2026-45669 | 2026-06-16 13:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 24, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254541 | 5.5 |
MEDIUM
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8542 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254542 | 7.8 |
HIGH
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-8541 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254543 | 5.5 |
MEDIUM
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8539 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254544 | 7.8 |
HIGH
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-8538 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254545 | 5.5 |
MEDIUM
Local |
microsoft |
windows_defender forefront_endpoint_protection security_essentials endpoint_protection system_center_endpoint_protection windows_intune_endpoint_protection exchange_server |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8537 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254546 | 5.5 |
MEDIUM
Local |
microsoft |
windows_defender forefront_endpoint_protection security_essentials endpoint_protection system_center_endpoint_protection windows_intune_endpoint_protection exchange_server |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8536 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254547 | 5.5 |
MEDIUM
Local |
microsoft |
windows_defender forefront_endpoint_protection security_essentials endpoint_protection system_center_endpoint_protection windows_intune_endpoint_protection exchange_server |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8535 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254548 | 7.5 |
HIGH
Network |
sap | hana_xs | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package with a filename containing a $ (dollar s… |
CWE-617
Reachable Assertion |
CVE-2017-8915 | 2024-11-21 12:34 | 2017-05-23 | Show | GitHub Exploit DB Packet Storm |
| 254549 | 8.3 |
HIGH
Network |
sap | hana_xs | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694. |
NVD-CWE-noinfo
|
CVE-2017-8914 | 2024-11-21 12:34 | 2017-05-23 | Show | GitHub Exploit DB Packet Storm |
| 254550 | 8.8 |
HIGH
Network |
sap | netweaver_application_server_java | The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a crafted XML document in a request to irj/se… |
CWE-611
XXE |
CVE-2017-8913 | 2024-11-21 12:34 | 2017-05-23 | Show | GitHub Exploit DB Packet Storm |