Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233211 6.8 警告 smallnuke - SmallNuke の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0147 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
233212 7.5 危険 phprisk - NetRisk の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0144 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
233213 7.5 危険 spacial audio solutions - samPHPweb の common/db.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0143 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
233214 9.3 危険 ZyXEL - ZyXEL P-330W ルータの Web 管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6730 2012-12-20 18:34 2009-09-10 Show GitHub Exploit DB Packet Storm
233215 4.3 警告 ZyXEL - ZyXEL P-330W ルータの Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6729 2012-12-20 18:34 2009-09-10 Show GitHub Exploit DB Packet Storm
233216 6.8 警告 webportal - WebPortal CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0142 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
233217 7.5 危険 webportal - WebPortal CMS の actions.php における任意のアカウントへのアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0141 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
233218 6.4 警告 uebimiau - Uebimiau Webmail の error.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0140 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
233219 7.5 危険 snetworks - SNETWORKS PHP CLASSIFIEDS の config.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0137 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
233220 5 警告 snitz forums 2000 - Snitz Forums 2000 における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0136 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1271 5.5 MEDIUM
Local 		microsoft windows_server_2019
windows_server_2022
windows_server_2025 		Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally. CWE-416
CWE-822
 Use After Free
 Untrusted Pointer Dereference 		CVE-2026-44805 2026-06-12 03:55 2026-06-10 Show GitHub Exploit DB Packet Storm
1272 8.8 HIGH
Network 		microsoft windows_server_2022
windows_server_2025 		Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. CWE-121
Stack-based Buffer Overflow 		CVE-2026-45648 2026-06-12 03:54 2026-06-10 Show GitHub Exploit DB Packet Storm
1273 7.5 HIGH
Network 		svelte svelte Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in <svelte:element this={tag}><… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2026-42567 2026-06-12 03:54 2026-06-10 Show GitHub Exploit DB Packet Storm
1274 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. CWE-122
CWE-416
Heap-based Buffer Overflow
 Use After Free 		CVE-2026-45653 2026-06-12 03:54 2026-06-10 Show GitHub Exploit DB Packet Storm
1275 7.5 HIGH
Network 		svelte devalue Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From version 5.6.3 to before version 5.8.1, devalue.parse could, due to qu… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42570 2026-06-12 03:52 2026-06-10 Show GitHub Exploit DB Packet Storm
1276 7.9 HIGH
Local 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. CWE-284
Improper Access Control 		CVE-2026-45654 2026-06-12 03:51 2026-06-10 Show GitHub Exploit DB Packet Storm
1277 5.3 MEDIUM
Physics 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. CWE-693
 Protection Mechanism Failure 		CVE-2026-45655 2026-06-12 03:48 2026-06-10 Show GitHub Exploit DB Packet Storm
1278 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-45601 2026-06-12 03:47 2026-06-10 Show GitHub Exploit DB Packet Storm
1279 6.1 MEDIUM
Network 		svelte svelte Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. This … CWE-79
Cross-site Scripting 		CVE-2026-42573 2026-06-12 03:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1280 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-45603 2026-06-12 03:46 2026-06-10 Show GitHub Exploit DB Packet Storm