Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1451 9.8 緊急
Network 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		DHCP クライアント サービスのリモートでコードが実行される脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-44815 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
1452 5.3 警告
Network 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-45031 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
1453 6.5 警告
Adjacent 		Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-45160 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
1454 8.8 重要
Local 		Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける複数の脆弱性 CWE-20
CWE-787
CWE-787
CVE-2026-45328 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
1455 6.5 警告
Local 		Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける複数の脆弱性 CWE-125
CWE-20
CWE-200
CVE-2026-45329 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
1456 5.3 警告
Network 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-193
CVE-2026-45358 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
1457 5.7 警告
Local 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-129
CVE-2026-45359 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
1458 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45468 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1459 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows プログラム互換性アシスタント サービスの特権昇格の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-45487 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1460 7.5 重要
Network 		Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-45541 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255021 6.5 MEDIUM
Network 		concretecms concrete_cms concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely tricking an admin into viewing a malicious page involving … CWE-352
 Origin Validation Error 		CVE-2017-8082 2024-11-21 12:33 2017-04-24 Show GitHub Exploit DB Packet Storm
255022 5.3 MEDIUM
Network 		tp-link tl-sg108e_firmware On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware. CWE-287
Improper Authentication 		CVE-2017-8078 2024-11-21 12:33 2017-04-24 Show GitHub Exploit DB Packet Storm
255023 7.5 HIGH
Network 		tp-link tl-sg108e_firmware On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749 firmware. CWE-798
 Use of Hard-coded Credentials 		CVE-2017-8077 2024-11-21 12:33 2017-04-24 Show GitHub Exploit DB Packet Storm
255024 9.8 CRITICAL
Network 		tp-link tl-sg108e_firmware On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware. CWE-326
Inadequate Encryption Strength 		CVE-2017-8076 2024-11-21 12:33 2017-04-24 Show GitHub Exploit DB Packet Storm
255025 9.8 CRITICAL
Network 		tp-link tl-sg108e_firmware On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2017-8075 2024-11-21 12:33 2017-04-24 Show GitHub Exploit DB Packet Storm
255026 9.8 CRITICAL
Network 		tp-link tl-sg108e_firmware On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmw… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2017-8074 2024-11-21 12:33 2017-04-24 Show GitHub Exploit DB Packet Storm
255027 7.5 HIGH
Network 		weechat
debian 		weechat
debian_linux 		WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overfl… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8073 2024-11-21 12:33 2017-04-24 Show GitHub Exploit DB Packet Storm
255028 7.8 HIGH
Local 		linux linux_kernel The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local us… CWE-388
 7PK - Errors 		CVE-2017-8072 2024-11-21 12:33 2017-04-23 Show GitHub Exploit DB Packet Storm
255029 5.5 MEDIUM
Local 		linux linux_kernel drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial… CWE-404
 Improper Resource Shutdown or Release 		CVE-2017-8071 2024-11-21 12:33 2017-04-23 Show GitHub Exploit DB Packet Storm
255030 7.8 HIGH
Local 		linux linux_kernel drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8070 2024-11-21 12:33 2017-04-23 Show GitHub Exploit DB Packet Storm