Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
261 9.1 緊急
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft Windows 10 21h2
Microsoft …
Windows 動的ホスト構成プロトコル (DHCP) の改ざんの脆弱性 New CWE-229
値の不適切な処理
CVE-2026-45602 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
262 6.8 警告
Local
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft Windows 10 21h2
Microsoft …
Windows DHCP クライアントの情報漏えいの脆弱性 New CWE-125
境界外読み取り
CVE-2026-45608 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
263 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft Windows 10 21h2
Microsoft …
Windows DHCP クライアントの情報漏えいの脆弱性 New CWE-125
境界外読み取り
CVE-2026-45634 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
264 7.5 重要
Network
sqlfluff sqlfluff sqlfluffにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御
CVE-2026-46373 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
265 7.5 重要
Network
sqlfluff sqlfluff sqlfluffにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-46374 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
266 8.8 重要
Network
flowiseai flowise flowiseaiのflowiseにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 New CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更
CVE-2026-46475 2026-06-15 11:17 2026-06-8 Show GitHub Exploit DB Packet Storm
267 4.6 警告
Network
Umbraco Umbraco CMS UmbracoのUmbraco CMSにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-46609 2026-06-15 11:17 2026-06-10 Show GitHub Exploit DB Packet Storm
268 6.1 警告
Network
Umbraco Umbraco CMS UmbracoのUmbraco CMSにおけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト
CVE-2026-46616 2026-06-15 11:17 2026-06-10 Show GitHub Exploit DB Packet Storm
269 8.8 重要
Network
シーメンス SINEC INS シーメンスのSINEC INSにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-46746 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
270 5.3 警告
Network
シーメンス SINEC INS シーメンスのSINEC INSにおけるパストラバーサルの脆弱性 New CWE-26
パストラバーサル (/dir/../filename)
CVE-2026-46747 2026-06-15 11:17 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255411 7.5 HIGH
Network
wireshark wireshark In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/p… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-7702 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255412 7.5 HIGH
Network
wireshark wireshark In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/pac… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-7701 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255413 6.5 MEDIUM
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-7700 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255414 5.5 MEDIUM
Local
libsndfile_project libsndfile In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file duri… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-7742 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255415 5.5 MEDIUM
Local
libsndfile_project libsndfile In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file dur… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-7741 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255416 10.0 CRITICAL
Network
solarwinds log_\&_event_manager In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiti… CWE-77
Command Injection
CVE-2017-7722 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255417 9.8 CRITICAL
Network
web-dorado spider_event_calendar SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or widget_Theme_function… CWE-89
SQL Injection
CVE-2017-7719 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255418 5.5 MEDIUM
Local
radare radare2 The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembl… CWE-125
Out-of-bounds Read
CVE-2017-7716 2024-11-21 12:32 2017-04-13 Show GitHub Exploit DB Packet Storm
255419 9.8 CRITICAL
Network
brother mfc_firmware
dcp_firmware
ads_firmware
hl_firmware
On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW… CWE-287
Improper Authentication
CVE-2017-7588 2024-11-21 12:32 2017-04-12 Show GitHub Exploit DB Packet Storm
255420 5.5 MEDIUM
Local
libsamplerate_project
debian
libsamplerate
debian_linux
In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. CWE-125
Out-of-bounds Read
CVE-2017-7697 2024-11-21 12:32 2017-04-12 Show GitHub Exploit DB Packet Storm