Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1461 7.5 重要
Network
レッドハット
GNU Project
Redhat Enterprise Linux For Power Little Endian Els
Red Hat Enterprise Linux for IBM z Systems - Extended Updat…
GNU Project等の複数ベンダの製品におけるAPI への入力に対する未定義の動作に関する脆弱性 CWE-475
API への入力に対する未定義の動作
CVE-2026-42009 2026-06-9 14:11 2026-05-18 Show GitHub Exploit DB Packet Storm
1462 7.8 重要
Local
Thermalright TR-VISION HOME ThermalrightのTR-VISION HOMEにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-4255 2026-06-9 14:11 2026-03-16 Show GitHub Exploit DB Packet Storm
1463 6.5 警告
Network
レッドハット Red Hat OpenShift Container Platform
OpenShift Router
レッドハットのRed Hat OpenShift Container Platform等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42965 2026-06-9 14:11 2026-05-29 Show GitHub Exploit DB Packet Storm
1464 8.7 重要
Network
SUSE Local Path Provisioner SUSEのLocal Path Provisionerにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-44543 2026-06-9 14:11 2026-05-28 Show GitHub Exploit DB Packet Storm
1465 9.6 緊急
Network
Guardrails AI Guardrails AI Guardrails AIにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード
CVE-2026-45758 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
1466 7.5 重要
Network
レッドハット Red Hat OpenShift Container Platform
OpenShift Router
レッドハットのRed Hat OpenShift Container Platform等の複数製品における認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-46579 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1467 5.3 警告
Network
Cosimo Net::statsd CosimoのNet::statsdにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-46739
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1468 7.5 重要
Network
Steve Sanbeg Etsy::StatsD Steve SanbegのEtsy::StatsDにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-46741
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1469 9.8 緊急
Network
Advanced Micro Devices (AMD) AITER (AI Tensor Engine for ROCm) Advanced Micro Devices (AMD)のAITER (AI Tensor Engine for ROCm)における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-49121 2026-06-9 14:10 2026-06-1 Show GitHub Exploit DB Packet Storm
1470 9.8 緊急
Network
日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-49200 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255511 6.1 MEDIUM
Network
netiq identity_manager Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary … CWE-79
Cross-site Scripting
CVE-2017-7427 2024-11-21 12:31 2018-03-6 Show GitHub Exploit DB Packet Storm
255512 6.1 MEDIUM
Network
netiq privileged_account_manager NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modification using the supplied cookie parameter. CWE-79
Cross-site Scripting
CVE-2017-7438 2024-11-21 12:31 2018-03-3 Show GitHub Exploit DB Packet Storm
255513 9.8 CRITICAL
Network
netiq identity_manager In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2017-7434 2024-11-21 12:31 2018-03-3 Show GitHub Exploit DB Packet Storm
255514 8.8 HIGH
Network
netiq
microfocus
edirectory The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iM… CWE-295
Improper Certificate Validation 
CVE-2017-7429 2024-11-21 12:31 2018-03-3 Show GitHub Exploit DB Packet Storm
255515 6.1 MEDIUM
Network
netiq access_manager A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider. CWE-79
Cross-site Scripting
CVE-2017-7419 2024-11-21 12:31 2018-03-3 Show GitHub Exploit DB Packet Storm
255516 8.1 HIGH
Network
opensuse libzypp In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject malicious RPM packages into… CWE-20
 Improper Input Validation 
CVE-2017-7436 2024-11-21 12:31 2018-03-2 Show GitHub Exploit DB Packet Storm
255517 8.1 HIGH
Network
opensuse libzypp In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject malicious RPM packages into… CWE-20
 Improper Input Validation 
CVE-2017-7435 2024-11-21 12:31 2018-03-2 Show GitHub Exploit DB Packet Storm
255518 9.1 CRITICAL
Network
netiq identity_manager The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks. CWE-611
XXE
CVE-2017-7426 2024-11-21 12:31 2018-03-2 Show GitHub Exploit DB Packet Storm
255519 9.8 CRITICAL
Network
xmlsoft
google
debian
libxml2
android
debian_linux
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-7376 2024-11-21 12:31 2018-02-20 Show GitHub Exploit DB Packet Storm
255520 9.8 CRITICAL
Network
xmlsoft
debian
google
libxml2
debian_linux
android
A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD … CWE-611
XXE
CVE-2017-7375 2024-11-21 12:31 2018-02-20 Show GitHub Exploit DB Packet Storm