Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
171	7.8	重要 Local	Kovidgoyal	Kitty	KovidgoyalのKittyにおける複数の脆弱性	CWE-150 CWE-94	CVE-2026-54057	2026-06-17 15:38	2026-06-12	Show	GitHub Exploit DB Packet Storm

172	7.7	重要 Network	Mattermost, Inc.	Mattermost Desktop	Mattermost, Inc.のMattermost Desktopにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-6517	2026-06-17 15:38	2026-06-15	Show	GitHub Exploit DB Packet Storm

173	8.1	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-7383	2026-06-17 15:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

174	8.1	重要 Network	langflow	langflow	langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-7787	2026-06-17 15:38	2026-06-11	Show	GitHub Exploit DB Packet Storm

175	8.8	重要 Network	IBM	IBM i	IBMのIBM iにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2026-7870	2026-06-17 15:38	2026-06-11	Show	GitHub Exploit DB Packet Storm

176	6.5	警告 Network	Mattermost, Inc.	Mattermost Desktop	Mattermost, Inc.のMattermost Desktopにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-8683	2026-06-17 15:38	2026-06-15	Show	GitHub Exploit DB Packet Storm

177	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-9076	2026-06-17 15:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

178	8.1	重要 Network	F5 Networks	nginx open source NGINX plus	F5 Networksのnginx open source等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-9256	2026-06-17 15:37	2026-05-22	Show	GitHub Exploit DB Packet Storm

179	4.3	警告 Network	webpack.js	webpack-dev-server	webpackのwebpack-dev-serverにおける複数の脆弱性	CWE-346 CWE-441	CVE-2026-9595	2026-06-17 15:37	2026-06-15	Show	GitHub Exploit DB Packet Storm

180	8.8	重要 Network	Trychroma	ChromaDB	TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-45830	2026-06-17 15:37	2026-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254881	5.5	MEDIUM Local	google	android	In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected.	NVD-CWE-noinfo	CVE-2017-8235	2024-11-21 12:33	2017-06-14	Show	GitHub Exploit DB Packet Storm

254882	7.8	HIGH Local	google	android	In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function.	CWE-125 Out-of-bounds Read	CVE-2017-8234	2024-11-21 12:33	2017-06-14	Show	GitHub Exploit DB Packet Storm

254883	7.8	HIGH Local	google	android	In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write.	CWE-787 Out-of-bounds Write	CVE-2017-8233	2024-11-21 12:33	2017-06-14	Show	GitHub Exploit DB Packet Storm

254884	7.8	HIGH Local	cisofy	lynis	Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.	CWE-59 Link Following	CVE-2017-8108	2024-11-21 12:33	2017-06-9	Show	GitHub Exploit DB Packet Storm

254885	8.8	HIGH Network	schneider-electric	somachine	A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability ex…	CWE-427 Uncontrolled Search Path Element	CVE-2017-7966	2024-11-21 12:33	2017-06-8	Show	GitHub Exploit DB Packet Storm

254886	7.3	HIGH Local	schneider-electric	somachine_hvac	A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7965	2024-11-21 12:33	2017-06-8	Show	GitHub Exploit DB Packet Storm

254887	6.7	MEDIUM Local	compulab	intense_pc_firmware mintbox_2_firmware	CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a …	CWE-862 Missing Authorization	CVE-2017-8083	2024-11-21 12:33	2017-06-6	Show	GitHub Exploit DB Packet Storm

254888	8.8	HIGH Network	git opensuse debian canonical fedoraproject	git-shell leap debian_linux ubuntu_linux fedora	git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.…	NVD-CWE-noinfo	CVE-2017-8386	2024-11-21 12:33	2017-06-2	Show	GitHub Exploit DB Packet Storm

254889	6.5	MEDIUM Network	eucalyptus	eucalyptus	Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service (E2 service outage) via unspecified vectors.	NVD-CWE-noinfo	CVE-2017-7999	2024-11-21 12:33	2017-06-2	Show	GitHub Exploit DB Packet Storm

254890	8.8	HIGH Network	pivotx	pivotx	PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file.	CWE-94 Code Injection	CVE-2017-8402	2024-11-21 12:33	2017-05-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed