Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251 7.8 重要
Local
マイクロソフト Microsoft Windows 11 26h1 Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-122
CWE-125
CWE-416
CVE-2026-44808 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
252 7.8 重要
Local
マイクロソフト Microsoft Windows 11 26h1 Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-122
CWE-20
CWE-416
CVE-2026-44811 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
253 7.8 重要
Local
マイクロソフト Microsoft Windows 11 26h1 Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-44813 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
254 5.5 警告
Local
マイクロソフト Microsoft Windows 11 26h1 Windows DWM Core ライブラリの情報漏えいの脆弱性 New CWE-122
CWE-125
CVE-2026-44814 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
255 5.4 警告
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45467 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
256 5.4 警告
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45481 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
257 8.8 重要
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint の特権の昇格の脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-45484 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
258 8.8 重要
Network
マイクロソフト Microsoft Exchange Server Microsoft Exchange Server の特権の昇格の脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45504 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
259 9.1 緊急
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft Windows 10 21h2
Microsoft …
Windows 動的ホスト構成プロトコル (DHCP) の改ざんの脆弱性 New CWE-229
値の不適切な処理
CVE-2026-45602 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
260 6.8 警告
Local
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft Windows 10 21h2
Microsoft …
Windows DHCP クライアントの情報漏えいの脆弱性 New CWE-125
境界外読み取り
CVE-2026-45608 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
358401 - checkpoint firewall-1 Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through th… CWE-264
Permissions, Privileges, and Access Controls
CVE-2002-2405 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358402 - perception liteserve Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request. CWE-20
 Improper Input Validation 
CVE-2002-2406 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358403 - qnx rtos Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) ph… CWE-264
Permissions, Privileges, and Access Controls
CVE-2002-2407 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358404 - gordano ntmail Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one u… NVD-CWE-Other
CVE-2002-2408 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358405 - qnx neutrino_rtos
photon_microgui
Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name … CWE-200
Information Exposure
CVE-2002-2409 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358406 - open_webmail open_webmail openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify v… CWE-200
Information Exposure
CVE-2002-2410 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358407 - nullsoft winamp Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts. CWE-255
Credentials Management
CVE-2002-2412 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358408 - deerfield website_pro WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name. NVD-CWE-Other
CVE-2002-2413 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358409 - alliedtelesyn at-8024
rapier_24
Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a runni… CWE-20
 Improper Input Validation 
CVE-2002-2415 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
358410 - zeroo http_server Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request. CWE-22
Path Traversal
CVE-2002-2416 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm