Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241 3.5
Network
OTRS プロジェクト OTRS OTRS プロジェクトのOTRSにおける不適切なデフォルトパーミッションに関する脆弱性 New CWE-276
不適切なデフォルトパーミッション
CVE-2026-48190 2026-06-16 13:40 2026-06-1 Show GitHub Exploit DB Packet Storm
242 3.5
Network
OTRS プロジェクト OTRS OTRS プロジェクトのOTRSにおける不適切なデフォルトパーミッションに関する脆弱性 New CWE-276
不適切なデフォルトパーミッション
CVE-2026-48191 2026-06-16 13:40 2026-06-1 Show GitHub Exploit DB Packet Storm
243 6.5 警告
Network
OTRS プロジェクト OTRS OTRS プロジェクトのOTRSにおける複数の脆弱性 New CWE-400
CWE-791
CVE-2026-48208 2026-06-16 13:40 2026-06-1 Show GitHub Exploit DB Packet Storm
244 7.1 重要
Network
OTRS プロジェクト OTRS OTRS プロジェクトのOTRSにおける複数の脆弱性 New CWE-116
CWE-79
CVE-2026-48209 2026-06-16 13:40 2026-06-1 Show GitHub Exploit DB Packet Storm
245 5.7 警告
Network
OTRS プロジェクト OTRS OTRS プロジェクトのOTRSにおける複数の脆弱性 New CWE-200
CWE-269
CVE-2026-48210 2026-06-16 13:40 2026-05-31 Show GitHub Exploit DB Packet Storm
246 7.5 重要
Network
Django Software Foundation daphne Django Software Foundationのdaphneにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44545 2026-06-16 13:40 2026-06-3 Show GitHub Exploit DB Packet Storm
247 5.3 警告
Network
Django Software Foundation daphne Django Software FoundationのdaphneにおけるHTTP リクエストスマグリングに関する脆弱性 New CWE-444
HTTP リクエストスマグリング
CVE-2026-44546 2026-06-16 13:40 2026-06-3 Show GitHub Exploit DB Packet Storm
248 6.1 警告
Network
マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server のなりすましの脆弱性 New CWE-79
CWE-918
CVE-2026-45501 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
249 5 警告
Network
マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server の情報漏えいの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45502 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
250 6.5 警告
Network
マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server の情報漏えいの脆弱性 New CWE-285
CWE-918
CVE-2026-45503 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255791 6.1 MEDIUM
Network
socialnetwork_project socialnetwork A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/tem… CWE-79
Cross-site Scripting
CVE-2017-7390 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255792 6.1 MEDIUM
Network
openeclass openeclass Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data (meeting_id, user) passed to the 'ope… CWE-79
Cross-site Scripting
CVE-2017-7389 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255793 6.1 MEDIUM
Network
wallaceit wallacepos A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data (token) passed to the 'wallacepos-master/myaccount/re… CWE-79
Cross-site Scripting
CVE-2017-7388 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255794 6.1 MEDIUM
Network
helpmewatchwho_project helpmewatchwho TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter). CWE-79
Cross-site Scripting
CVE-2017-7387 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255795 6.1 MEDIUM
Network
symetrie_project symetrie citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter). CWE-79
Cross-site Scripting
CVE-2017-7386 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255796 7.8 HIGH
Local
linux linux_kernel Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring… CWE-476
CWE-416
 NULL Pointer Dereference
 Use After Free
CVE-2017-7374 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255797 6.1 MEDIUM
Network
lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack. CWE-79
Cross-site Scripting
CVE-2017-7363 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm
255798 6.1 MEDIUM
Network
lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack. CWE-79
Cross-site Scripting
CVE-2017-7362 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm
255799 6.1 MEDIUM
Network
lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack. CWE-79
Cross-site Scripting
CVE-2017-7361 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm
255800 6.1 MEDIUM
Network
lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack. CWE-79
Cross-site Scripting
CVE-2017-7360 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm