Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241 7.5 重要
Network
axios project axios axios projectのaxiosにおける送信データへの重要な情報の挿入に関する脆弱性 New CWE-201
送信データへの重要な情報の挿入
CVE-2026-44487 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
242 7.5 重要
Network
axios project axios axios projectのaxiosにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44488 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
243 8.6 重要
Network
axios project axios axios projectのaxiosにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44492 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
244 8.7 重要
Network
axios project axios axios projectのaxiosにおける複数の脆弱性 New CWE-1321
CWE-441
CVE-2026-44494 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
245 7.5 重要
Network
axios project axios axios projectのaxiosにおける複数の脆弱性 New CWE-1333
CWE-400
CVE-2026-44496 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
246 7.5 重要
Network
Pipecat Pipecat Pipecatにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-44716 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
247 7.5 重要
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft Windows 10 21h2
Microsoft …
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 New CWE-416
CWE-787
CVE-2026-44801 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
248 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft Windows 10 21h2
Microsoft Windows 11 25h2
Microsoft Wind…
Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-44802 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
249 7.8 重要
Local
マイクロソフト Microsoft Windows 11 26h1 Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-44804 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
250 7.8 重要
Local
マイクロソフト Microsoft Windows 11 26h1 Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-44807 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255671 9.8 CRITICAL
Network
dlink dir-615 The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor ne… CWE-295
CWE-311
Improper Certificate Validation 
Missing Encryption of Sensitive Data
CVE-2017-7406 2024-11-21 12:31 2017-07-7 Show GitHub Exploit DB Packet Storm
255672 9.8 CRITICAL
Network
dlink dir-615 On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user based on the IP address of his machine. By spoofing the IP address belonging to the victim's host, an att… CWE-287
Improper Authentication
CVE-2017-7405 2024-11-21 12:31 2017-07-7 Show GitHub Exploit DB Packet Storm
255673 8.8 HIGH
Network
dlink dir-615 On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the victim… CWE-352
 Origin Validation Error
CVE-2017-7404 2024-11-21 12:31 2017-07-7 Show GitHub Exploit DB Packet Storm
255674 6.1 MEDIUM
Network
topdesk topdesk There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019. CWE-79
Cross-site Scripting
CVE-2017-7276 2024-11-21 12:31 2017-07-5 Show GitHub Exploit DB Packet Storm
255675 9.8 CRITICAL
Network
humaxdigital hg100r_firmware An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin. CWE-200
Information Exposure
CVE-2017-7317 2024-11-21 12:31 2017-07-4 Show GitHub Exploit DB Packet Storm
255676 6.1 MEDIUM
Network
humaxdigital hg100r_firmware An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page. CWE-79
Cross-site Scripting
CVE-2017-7316 2024-11-21 12:31 2017-07-4 Show GitHub Exploit DB Packet Storm
255677 9.8 CRITICAL
Network
humaxdigital hg100r_firmware An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup,… CWE-306
CWE-522
Missing Authentication for Critical Function
 Insufficiently Protected Credentials
CVE-2017-7315 2024-11-21 12:31 2017-07-4 Show GitHub Exploit DB Packet Storm
255678 7.5 HIGH
Network
ntop ntopng The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty … CWE-476
 NULL Pointer Dereference
CVE-2017-7458 2024-11-21 12:31 2017-06-27 Show GitHub Exploit DB Packet Storm
255679 7.5 HIGH
Network
ntop ntopng ntopng before 3.0 allows HTTP Response Splitting. CWE-74
Injection
CVE-2017-7459 2024-11-21 12:31 2017-06-26 Show GitHub Exploit DB Packet Storm
255680 6.1 MEDIUM
Network
ntop ntopng ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated. CWE-79
Cross-site Scripting
CVE-2017-7416 2024-11-21 12:31 2017-06-26 Show GitHub Exploit DB Packet Storm