Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251 5.4 警告
Network 		nuxt nuxt/webpack-builder
nuxt/rspack-builder 		Nuxtのnuxt/rspack-builder等の複数製品における危険なメソッドや機能の公開に関する脆弱性 New CWE-749
危険なメソッドや機能の公開 		CVE-2026-45670 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
252 5.4 警告
Network 		nuxt nuxt
nuxt/nitro-server 		Nuxtのnuxt/nitro-server等の複数製品における複数の脆弱性 New CWE-349
CWE-444
CWE-79
CVE-2026-46342 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
253 9.8 緊急
Network 		Defense Unicorns UDS Identity Config Defense UnicornsのUDS Identity Configにおける複数の脆弱性 New CWE-287
CWE-303
CVE-2026-46389 2026-06-16 13:40 2026-06-5 Show GitHub Exploit DB Packet Storm
254 5.8 警告
Local 		Shane Pearman (spearman) unbounded-spsc Shane Pearman (spearman)のunbounded-spscにおける複数の脆弱性 New CWE-125
CWE-415
CWE-704
CWE-787
CVE-2026-46690 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
255 5.3 警告
Network 		nuxt nuxt
nuxt/nitro-server 		Nuxtのnuxt/nitro-server等の複数製品における複数の脆弱性 New CWE-284
CWE-288
CVE-2026-47200 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
256 5.4 警告
Network 		マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE) 		Microsoft Exchange Server のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-47631 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
257 8.2 重要
Network 		ERLANG Erlang Runtime System (ERTS)
Erlang/OTP 		ERLANGのErlang/OTP等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-49759 2026-06-16 13:40 2026-06-10 Show GitHub Exploit DB Packet Storm
258 5.5 警告
Local 		ERLANG Erl Interface
Erlang/OTP 		ERLANGのErl Interface等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-49760 2026-06-16 13:40 2026-06-10 Show GitHub Exploit DB Packet Storm
259 5.7 警告
Adjacent 		nuxt nuxt/webpack-builder
nuxt/rspack-builder 		Nuxtのnuxt/rspack-builder等の複数製品における危険なメソッドや機能の公開に関する脆弱性 New CWE-749
危険なメソッドや機能の公開 		CVE-2026-49993 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
260 9.8 緊急
Network 		jmespath project jmespath JMESPathにおける複数の脆弱性 New CWE-116
CWE-20
CWE-94
CVE-2026-54133 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255101 7.5 HIGH
Network 		eclipse
debian 		jetty
debian_linux 		In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line… NVD-CWE-noinfo
CVE-2017-7656 2024-11-21 12:32 2018-06-27 Show GitHub Exploit DB Packet Storm
255102 5.3 MEDIUM
Network 		netapp oncommand_unified_manager NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is… CWE-200
Information Exposure 		CVE-2017-7568 2024-11-21 12:32 2018-06-23 Show GitHub Exploit DB Packet Storm
255103 5.3 MEDIUM
Network 		mozilla
redhat
debian 		thunderbird
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
debian_linux 		RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2. CWE-74
Injection 		CVE-2017-7848 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255104 4.3 MEDIUM
Network 		debian
redhat
mozilla 		debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_aus
enterprise_linux_eus
thunderbird 		Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2. CWE-200
Information Exposure 		CVE-2017-7847 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255105 8.8 HIGH
Network 		redhat
debian
mozilla 		enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
debian_linux
thunderbird 		It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Feed article -> Website" or in the standard format of "View -> Feed article -> defa… CWE-74
Injection 		CVE-2017-7846 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255106 8.8 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the libr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-7845 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255107 6.5 MEDIUM
Network 		mozilla firefox A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow … CWE-200
Information Exposure 		CVE-2017-7844 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255108 5.3 MEDIUM
Network 		mozilla firefox If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for "<link>" elements instead of one. One of these requests includes the referrer instead of … CWE-200
Information Exposure 		CVE-2017-7842 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255109 6.1 MEDIUM
Network 		mozilla firefox JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this… CWE-79
Cross-site Scripting 		CVE-2017-7840 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255110 7.5 HIGH
Network 		debian
mozilla
redhat 		debian_linux
firefox
firefox_esr
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus 		When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode a… CWE-200
Information Exposure 		CVE-2017-7843 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm