Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 11 | 7.5 |
重要
Network |
マイクロソフト |
Microsoft Windows 11 26h1 Microsoft Windows Server 2022 Microsoft Windows 10 22h2 Microsoft Windows 10 1607 Microsoft Wind… |
Windows リモート デスクトップ プロトコル (RDP) の情報漏えいの脆弱性 New |
CWE-125
境界外読み取り |
CVE-2026-45639 | 2026-06-22 11:56 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 12 | 7.8 |
重要
Local |
マイクロソフト |
Microsoft Office 2021 Long Term Servicing Channel Edition Microsoft Office 365 Microsoft Office 2024 Long-Term Servicing Ch… |
Microsoft Office のリモート コードが実行される脆弱性 New |
CWE-787 CWE-822 |
CVE-2026-45645 | 2026-06-22 11:56 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 13 | 7 |
重要
Local |
マイクロソフト | Microsoft Defender for Endpoint | Microsoft Defender for Endpoint for Mac の特権の昇格の脆弱性 New |
CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 |
CVE-2026-45647 | 2026-06-22 11:55 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 14 | 7.1 |
重要
Local |
マイクロソフト |
Microsoft Word Microsoft Excel Microsoft PowerPoint |
Office for Android のなりすましの脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-45649 | 2026-06-22 11:55 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 15 | 6.8 |
警告
Network |
Discourse | Discourse | Discourseにおけるパストラバーサルの脆弱性 New |
CWE-22
パス・トラバーサル |
CVE-2026-45775 | 2026-06-22 11:55 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 16 | 9.9 |
緊急
Network |
オラクル | Oracle WebCenter Portal | オラクルのOracle WebCenter Portalにおけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-46765 | 2026-06-22 11:55 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
| 17 | 9.8 |
緊急
Network |
オラクル | Oracle WebCenter Content | オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-46766 | 2026-06-22 11:55 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
| 18 | 9.9 |
緊急
Network |
オラクル | Oracle WebCenter Portal | オラクルのOracle WebCenter Portalにおけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-46767 | 2026-06-22 11:55 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
| 19 | 6 |
警告
Local |
オラクル | Oracle VM VirtualBox | オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-46768 | 2026-06-22 11:55 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
| 20 | 7.2 |
重要
Network |
オラクル | Oracle Application Development Framework (Oracle ADF) | オラクルのOracle Application Development Framework (Oracle ADF)におけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-46769 | 2026-06-22 11:55 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 22, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255291 | 9.8 |
CRITICAL
Network |
newport |
xps-cx_firmware xps-qx_firmware |
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL). |
CWE-287
Improper Authentication |
CVE-2017-7919 | 2024-11-21 12:32 | 2017-07-4 | Show | GitHub Exploit DB Packet Storm |
| 255292 | 9.8 |
CRITICAL
Network |
ge |
multilin_sr_750_feeder_protection_relay_firmware multilin_sr_760_feeder_protection_relay_firmware multilin_sr_469_motor_protection_relay_firmware multilin_sr_489_generator_protection_relay_f… |
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmw… |
CWE-326 CWE-330 CWE-522 Inadequate Encryption Strength Use of Insufficiently Random Values Insufficiently Protected Credentials |
CVE-2017-7905 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255293 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 17… |
CWE-326
Inadequate Encryption Strength |
CVE-2017-7903 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255294 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and pri… |
CWE-330
Use of Insufficiently Random Values |
CVE-2017-7902 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255295 | 8.6 |
HIGH
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and … |
CWE-330
Use of Insufficiently Random Values |
CVE-2017-7901 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255296 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L1… |
CWE-200
Information Exposure |
CVE-2017-7899 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255297 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Vers… |
CWE-307
mproper Restriction of Excessive Authentication Attempts |
CVE-2017-7898 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 255298 | 7.5 |
HIGH
Network |
apache | ignite | Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do th… |
CWE-200
Information Exposure |
CVE-2017-7686 | 2024-11-21 12:32 | 2017-06-28 | Show | GitHub Exploit DB Packet Storm |
| 255299 | 7.5 |
HIGH
Network |
tpm2-tools_project | tpm2.0-tools | tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC. |
CWE-522
Insufficiently Protected Credentials |
CVE-2017-7524 | 2024-11-21 12:32 | 2017-06-27 | Show | GitHub Exploit DB Packet Storm |
| 255300 | 6.5 |
MEDIUM
Network |
openvpn | openvpn | OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character. |
CWE-476
NULL Pointer Dereference |
CVE-2017-7522 | 2024-11-21 12:32 | 2017-06-27 | Show | GitHub Exploit DB Packet Storm |