Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211 8.4 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Outlook および Word のリモートでコードが実行される脆弱性 New CWE-843
型の取り違え 		CVE-2026-45456 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
212 7.8 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Word のリモートでコードが実行される脆弱性 New CWE-125
境界外読み取り 		CVE-2026-45457 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
213 8.4 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Outlook および Word のリモートでコードが実行される脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-45458 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
214 3.3 低
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Excel のセキュリティ機能のバイパスの脆弱性 New CWE-693
保護メカニズムの不具合 		CVE-2026-45459 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
215 7.8 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Excel のリモートでコードが実行される脆弱性 New CWE-122
CWE-191
CVE-2026-45469 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
216 3.3 低
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Office の情報漏えいの脆弱性 New CWE-125
境界外読み取り 		CVE-2026-45485 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
217 7.8 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Word のリモートでコードが実行される脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-45486 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
218 7.8 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Word のリモートでコードが実行される脆弱性 New CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-45643 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
219 8.4 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition Microsoft Outlook および Word のリモートでコードが実行される脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-47635 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
220 6.5 警告
Network 		ERLANG
chilkat software		 Erlang/OTP
Erlang/Inets (Inets)
ftp 		ERLANGのErlang/Inets (Inets)等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-48858 2026-06-12 14:34 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2801 6.1 MEDIUM
Local 		- - Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635. CWE-787
 Out-of-bounds Write 		CVE-2026-8916 2026-06-5 00:27 2026-06-4 Show GitHub Exploit DB Packet Storm
2802 - - - This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker cou… CWE-78
OS Command  		CVE-2026-45431 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2803 - - - This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-45432 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2804 - - - This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the… CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-45433 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2805 9.1 CRITICAL
Network 		- - A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-4035 2026-06-5 00:25 2026-06-3 Show GitHub Exploit DB Packet Storm
2806 6.1 MEDIUM
Network 		- - A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use o… CWE-346
 Origin Validation Error 		CVE-2026-6657 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2807 - - - A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: ver… CWE-250
 Execution with Unnecessary Privileges 		CVE-2025-12694 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2808 8.1 HIGH
Network 		- - HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site v… CWE-1027
CVE-2025-59874 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2809 - - - An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. CWE-79
Cross-site Scripting 		CVE-2026-5385 2026-06-5 00:23 2026-06-3 Show GitHub Exploit DB Packet Storm
2810 - - - An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and trigger unescaped rendering in the … CWE-79
Cross-site Scripting 		CVE-2026-42839 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm