Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1461 7.5 重要
Network
レッドハット
GNU Project
Redhat Enterprise Linux For Power Little Endian Els
Red Hat Enterprise Linux for IBM z Systems - Extended Updat…
GNU Project等の複数ベンダの製品におけるAPI への入力に対する未定義の動作に関する脆弱性 CWE-475
API への入力に対する未定義の動作
CVE-2026-42009 2026-06-9 14:11 2026-05-18 Show GitHub Exploit DB Packet Storm
1462 7.8 重要
Local
Thermalright TR-VISION HOME ThermalrightのTR-VISION HOMEにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-4255 2026-06-9 14:11 2026-03-16 Show GitHub Exploit DB Packet Storm
1463 6.5 警告
Network
レッドハット Red Hat OpenShift Container Platform
OpenShift Router
レッドハットのRed Hat OpenShift Container Platform等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42965 2026-06-9 14:11 2026-05-29 Show GitHub Exploit DB Packet Storm
1464 8.7 重要
Network
SUSE Local Path Provisioner SUSEのLocal Path Provisionerにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-44543 2026-06-9 14:11 2026-05-28 Show GitHub Exploit DB Packet Storm
1465 9.6 緊急
Network
Guardrails AI Guardrails AI Guardrails AIにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード
CVE-2026-45758 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
1466 7.5 重要
Network
レッドハット Red Hat OpenShift Container Platform
OpenShift Router
レッドハットのRed Hat OpenShift Container Platform等の複数製品における認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-46579 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1467 5.3 警告
Network
Cosimo Net::statsd CosimoのNet::statsdにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-46739
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1468 7.5 重要
Network
Steve Sanbeg Etsy::StatsD Steve SanbegのEtsy::StatsDにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-46741
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1469 9.8 緊急
Network
Advanced Micro Devices (AMD) AITER (AI Tensor Engine for ROCm) Advanced Micro Devices (AMD)のAITER (AI Tensor Engine for ROCm)における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-49121 2026-06-9 14:10 2026-06-1 Show GitHub Exploit DB Packet Storm
1470 9.8 緊急
Network
日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-49200 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255471 8.8 HIGH
Network
pivotx pivotx PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to ch… CWE-94
Code Injection
CVE-2017-7570 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255472 9.8 CRITICAL
Network
dragonwavex horizon_wireless_radio_firmware DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credent… CWE-798
 Use of Hard-coded Credentials
CVE-2017-7576 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255473 9.8 CRITICAL
Network
schneider-electric modicon_tm221ce16r_firmware Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus p… CWE-200
Information Exposure
CVE-2017-7575 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255474 9.8 CRITICAL
Network
schneider-electric modicon_tm221ce16r_firmware
somachine
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized… CWE-798
 Use of Hard-coded Credentials
CVE-2017-7574 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255475 8.0 HIGH
Network
ladybirdweb faveo_helpdesk public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges. CWE-352
 Origin Validation Error
CVE-2017-7571 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255476 8.6 HIGH
Network
vbulletin vbulletin In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2017-7569 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255477 7.7 HIGH
Network
mybb mybb MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2017-7566 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255478 8.8 HIGH
Network
splunk hadoop_connect Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041. CWE-22
Path Traversal
CVE-2017-7565 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255479 8.1 HIGH
Network
backintime_project backintime The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condi… CWE-362
Race Condition
CVE-2017-7572 2024-11-21 12:32 2017-04-7 Show GitHub Exploit DB Packet Storm
255480 7.5 HIGH
Network
botan_project botan bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2017-7252 2024-11-21 12:31 2023-11-3 Show GitHub Exploit DB Packet Storm