Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
151 7.5 重要
Network 		Express.js Multer Express.jsのMulterにおける不完全なクリーンアップに関する脆弱性 New CWE-459
不完全なクリーンアップ 		CVE-2026-5038 2026-06-17 15:39 2026-06-15 Show GitHub Exploit DB Packet Storm
152 7.5 重要
Network 		Express.js Multer Express.jsのMulterにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-5079 2026-06-17 15:39 2026-06-15 Show GitHub Exploit DB Packet Storm
153 8.1 重要
Network 		Zoom Video Communications, Inc. Zoom Meeting SDK
Zoom Workplace 		Zoom Video Communications, Inc.のZoom Meeting SDK等の複数製品におけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性 New CWE-939
カスタム URL スキームのハンドラの不適切な認可 		CVE-2026-53408 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
154 6.6 警告
Local 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-53820 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
155 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-53821 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
156 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける複数の脆弱性 New CWE-367
CWE-77
CVE-2026-53822 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
157 8.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避 		CVE-2026-53823 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
158 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるセッション期限に関する脆弱性 New CWE-613
不適切なセッション期限 		CVE-2026-53824 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
159 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-53825 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
160 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性 New CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-53826 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255231 9.1 CRITICAL
Network 		libexif_project libexif libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data … CWE-125
Out-of-bounds Read 		CVE-2017-7544 2024-11-21 12:32 2017-09-22 Show GitHub Exploit DB Packet Storm
255232 7.5 HIGH
Network 		rockwellautomation 1763-l16bwa_firmware
1763-l16awa_firmware
1763-l16bbb_firmware
1763-l16dwd_firmware 		An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could s… CWE-20
 Improper Input Validation  		CVE-2017-7924 2024-11-21 12:32 2017-09-21 Show GitHub Exploit DB Packet Storm
255233 7.5 HIGH
Network 		redhat jboss_enterprise_application_platform Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact. CWE-444
HTTP Request Smuggling 		CVE-2017-7561 2024-11-21 12:32 2017-09-14 Show GitHub Exploit DB Packet Storm
255234 5.5 MEDIUM
Local 		redhat rhnsd It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-7560 2024-11-21 12:32 2017-09-14 Show GitHub Exploit DB Packet Storm
255235 5.4 MEDIUM
Network 		fortinet fortios A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while c… CWE-79
Cross-site Scripting 		CVE-2017-7735 2024-11-21 12:32 2017-09-12 Show GitHub Exploit DB Packet Storm
255236 5.4 MEDIUM
Network 		fortinet fortios A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions. CWE-79
Cross-site Scripting 		CVE-2017-7734 2024-11-21 12:32 2017-09-12 Show GitHub Exploit DB Packet Storm
255237 6.5 MEDIUM
Network 		eclipse
debian 		mosquitto
debian_linux 		In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that… CWE-287
Improper Authentication 		CVE-2017-7650 2024-11-21 12:32 2017-09-12 Show GitHub Exploit DB Packet Storm
255238 9.8 CRITICAL
Network 		eclipse kura The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is le… CWE-287
Improper Authentication 		CVE-2017-7649 2024-11-21 12:32 2017-09-12 Show GitHub Exploit DB Packet Storm
255239 6.1 MEDIUM
Network 		icewarp server In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter. CWE-79
Cross-site Scripting 		CVE-2017-7855 2024-11-21 12:32 2017-09-1 Show GitHub Exploit DB Packet Storm
255240 6.5 MEDIUM
Network 		riverbed opnet_app_response_xpert Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows remote authenticated users to inject arbitrary commands to read OS files. CWE-22
Path Traversal 		CVE-2017-7693 2024-11-21 12:32 2017-08-26 Show GitHub Exploit DB Packet Storm