Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
11 8.1 重要
Network 		Grafana Labs Grafana Grafana LabsのGrafanaにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-33381 2026-06-17 15:46 2026-05-13 Show GitHub Exploit DB Packet Storm
12 5.4 警告
Network 		langflow Langflow Desktop langflowのLangflow Desktopにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-3341 2026-06-17 15:46 2026-06-11 Show GitHub Exploit DB Packet Storm
13 6.1 警告
Network 		IBM IBM DevOps Plan IBMのIBM DevOps PlanにおけるHTTP ヘッダのスクリプト構文の不適切な無効化に関する脆弱性 New CWE-644
HTTP ヘッダのスクリプト構文の不適切な無効化 		CVE-2026-4096 2026-06-17 15:46 2026-06-11 Show GitHub Exploit DB Packet Storm
14 5.4 警告
Network 		VMware VMware Cloud Foundation
VMware Telco Cloud Platform
VMware vSphere
VMware Aria Operations 		VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2026-41722 2026-06-17 15:46 2026-06-8 Show GitHub Exploit DB Packet Storm
15 8 重要
Network 		VMware VMware Cloud Foundation
VMware Telco Cloud Platform
VMware vSphere
VMware Aria Operations 		VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41723 2026-06-17 15:46 2026-06-8 Show GitHub Exploit DB Packet Storm
16 5.9 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-42767 2026-06-17 15:46 2026-06-9 Show GitHub Exploit DB Packet Storm
17 3.7 低
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける暗号化処理の不備に関する脆弱性 New CWE-325
暗号化処理の不備 		CVE-2026-42770 2026-06-17 15:46 2026-06-9 Show GitHub Exploit DB Packet Storm
18 6.2 警告
Local 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-42771 2026-06-17 15:46 2026-06-9 Show GitHub Exploit DB Packet Storm
19 8.8 重要
Network 		Kovidgoyal Kitty KovidgoyalのKittyにおけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション 		CVE-2026-42850 2026-06-17 15:46 2026-06-12 Show GitHub Exploit DB Packet Storm
20 7.8 重要
Local 		Kovidgoyal Kitty KovidgoyalのKittyにおける複数の脆弱性 New CWE-862
CWE-94
CVE-2026-42851 2026-06-17 15:46 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255401 9.8 CRITICAL
Network 		smart_related_articles_project smart_related_articles The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability). CWE-89
SQL Injection 		CVE-2017-7628 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255402 5.3 MEDIUM
Network 		smart_related_articles_project smart_related_articles The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check). NVD-CWE-noinfo
CVE-2017-7627 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255403 6.1 MEDIUM
Network 		smart_related_articles_project smart_related_articles The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method). CWE-79
Cross-site Scripting 		CVE-2017-7626 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255404 7.5 HIGH
Network 		wireshark wireshark In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/pac… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-7748 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255405 7.5 HIGH
Network 		wireshark
debian 		wireshark
debian_linux 		In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c… CWE-20
 Improper Input Validation  		CVE-2017-7747 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255406 7.5 HIGH
Network 		wireshark
debian 		wireshark
debian_linux 		In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/pa… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-7746 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255407 7.5 HIGH
Network 		wireshark wireshark In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-7745 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255408 7.5 HIGH
Network 		wireshark wireshark In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/diss… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-7705 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255409 7.5 HIGH
Network 		wireshark wireshark In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-7704 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255410 7.5 HIGH
Network 		wireshark
debian 		wireshark
debian_linux 		In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calc… CWE-74
Injection 		CVE-2017-7703 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm