Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 171 | 8.1 |
重要
Network |
OpenSSL Project | OpenSSL | OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性 New |
CWE-787
境界外書き込み |
CVE-2026-7383 | 2026-06-17 15:38 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 172 | 8.1 |
重要
Network |
langflow | langflow | langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性 New |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-7787 | 2026-06-17 15:38 | 2026-06-11 | Show | GitHub Exploit DB Packet Storm |
| 173 | 8.8 |
重要
Network |
IBM | IBM i | IBMのIBM iにおける制御されていない検索パスの要素に関する脆弱性 New |
CWE-427
制御されていない検索パスの要素 |
CVE-2026-7870 | 2026-06-17 15:38 | 2026-06-11 | Show | GitHub Exploit DB Packet Storm |
| 174 | 6.5 |
警告
Network |
Mattermost, Inc. | Mattermost Desktop | Mattermost, Inc.のMattermost Desktopにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New |
CWE-770
制限またはスロットリング無しのリソースの割り当て |
CVE-2026-8683 | 2026-06-17 15:38 | 2026-06-15 | Show | GitHub Exploit DB Packet Storm |
| 175 | 7.5 |
重要
Network |
OpenSSL Project | OpenSSL | OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 New |
CWE-125
境界外読み取り |
CVE-2026-9076 | 2026-06-17 15:38 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 176 | 8.1 |
重要
Network |
F5 Networks |
nginx open source NGINX plus |
F5 Networksのnginx open source等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 New |
CWE-122
ヒープオーバーフロー |
CVE-2026-9256 | 2026-06-17 15:37 | 2026-05-22 | Show | GitHub Exploit DB Packet Storm |
| 177 | 4.3 |
警告
Network |
webpack.js | webpack-dev-server | webpackのwebpack-dev-serverにおける複数の脆弱性 New |
CWE-346 CWE-441 |
CVE-2026-9595 | 2026-06-17 15:37 | 2026-06-15 | Show | GitHub Exploit DB Packet Storm |
| 178 | 8.8 |
重要
Network |
Trychroma | ChromaDB | TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性 New |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-45830 | 2026-06-17 15:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 179 | 8.8 |
重要
Network |
Trychroma | ChromaDB | TrychromaのChromaDBにおける不正な認証に関する脆弱性 New |
CWE-863
不正な認証 |
CVE-2026-45831 | 2026-06-17 15:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 180 | 8.8 |
重要
Network |
Trychroma | ChromaDB | TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性 New |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-45832 | 2026-06-17 15:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 18, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255291 | 9.8 |
CRITICAL
Network |
newport |
xps-cx_firmware xps-qx_firmware |
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL). |
CWE-287
Improper Authentication |
CVE-2017-7919 | 2024-11-21 12:32 | 2017-07-4 | Show | GitHub Exploit DB Packet Storm |
| 255292 | 9.8 |
CRITICAL
Network |
ge |
multilin_sr_750_feeder_protection_relay_firmware multilin_sr_760_feeder_protection_relay_firmware multilin_sr_469_motor_protection_relay_firmware multilin_sr_489_generator_protection_relay_f… |
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmw… |
CWE-326 CWE-330 CWE-522 Inadequate Encryption Strength Use of Insufficiently Random Values Insufficiently Protected Credentials |
CVE-2017-7905 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255293 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 17… |
CWE-326
Inadequate Encryption Strength |
CVE-2017-7903 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255294 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and pri… |
CWE-330
Use of Insufficiently Random Values |
CVE-2017-7902 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255295 | 8.6 |
HIGH
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and … |
CWE-330
Use of Insufficiently Random Values |
CVE-2017-7901 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255296 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L1… |
CWE-200
Information Exposure |
CVE-2017-7899 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255297 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Vers… |
CWE-307
mproper Restriction of Excessive Authentication Attempts |
CVE-2017-7898 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255298 | 7.5 |
HIGH
Network |
apache | ignite | Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do th… |
CWE-200
Information Exposure |
CVE-2017-7686 | 2024-11-21 12:32 | 2017-06-28 | Show | GitHub Exploit DB Packet Storm |
| 255299 | 7.5 |
HIGH
Network |
tpm2-tools_project | tpm2.0-tools | tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC. |
CWE-522
Insufficiently Protected Credentials |
CVE-2017-7524 | 2024-11-21 12:32 | 2017-06-27 | Show | GitHub Exploit DB Packet Storm |
| 255300 | 6.5 |
MEDIUM
Network |
openvpn | openvpn | OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character. |
CWE-476
NULL Pointer Dereference |
CVE-2017-7522 | 2024-11-21 12:32 | 2017-06-27 | Show | GitHub Exploit DB Packet Storm |