Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
291 7.8 重要
Local 		アドビシステムズ Adobe Reader
Adobe Acrobat 		アドビのAdobe Acrobat等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-47959 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
292 5.5 警告
Local 		アドビシステムズ Adobe Reader
Adobe Acrobat 		アドビのAdobe Acrobat等の複数製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-47961 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
293 7.8 重要
Local 		アドビシステムズ Adobe Format Plugins アドビのAdobe Format Pluginsにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-48291 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
294 7.8 重要
Local 		アドビシステムズ Adobe Format Plugins アドビのAdobe Format Pluginsにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-48292 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
295 10 緊急
Network 		アドビシステムズ Adobe Campaign アドビのAdobe Campaignにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-48303 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
296 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 New CWE-502
CWE-79
CVE-2026-48560 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
297 4.6 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-48562 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
298 5.5 警告
Local 		マイクロソフト Visual Studio Code Visual Studio Code セキュリティ機能のバイパスの脆弱性 New CWE-20
CWE-23
CWE-noinfo
CVE-2026-48569 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
299 7.8 重要
Local 		マイクロソフト Microsoft PC Manager Microsoft PC マネージャーのセキュリティ機能バイパスの脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-49161 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
300 8.8 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-50223 2026-06-15 11:15 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255201 5.3 MEDIUM
Network 		eclipse
debian 		mosquitto
debian_linux 		The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject invalid UTF-8 strings to disconnect the… CWE-20
 Improper Input Validation  		CVE-2017-7653 2024-11-21 12:32 2018-06-6 Show GitHub Exploit DB Packet Storm
255202 7.5 HIGH
Network 		eclipse
debian 		mosquitto
debian_linux 		In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lo… NVD-CWE-noinfo
CVE-2017-7652 2024-11-21 12:32 2018-04-25 Show GitHub Exploit DB Packet Storm
255203 7.5 HIGH
Network 		eclipse
debian 		mosquitto
debian_linux 		In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authentications if occur … CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-7651 2024-11-21 12:32 2018-04-24 Show GitHub Exploit DB Packet Storm
255204 9.8 CRITICAL
Network 		saltstack salt In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. NVD-CWE-noinfo
CVE-2017-7893 2024-11-21 12:32 2018-04-24 Show GitHub Exploit DB Packet Storm
255205 5.4 MEDIUM
Network 		redhat openshift OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creat… CWE-79
Cross-site Scripting 		CVE-2017-7534 2024-11-21 12:32 2018-04-12 Show GitHub Exploit DB Packet Storm
255206 6.1 MEDIUM
Network 		qnap qts Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML. CWE-79
Cross-site Scripting 		CVE-2017-7632 2024-11-21 12:32 2018-03-28 Show GitHub Exploit DB Packet Storm
255207 6.1 MEDIUM
Network 		qnap qts Cross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web … CWE-79
Cross-site Scripting 		CVE-2017-7631 2024-11-21 12:32 2018-03-28 Show GitHub Exploit DB Packet Storm
255208 5.3 MEDIUM
Network 		qnap qts QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinf… CWE-200
Information Exposure 		CVE-2017-7630 2024-11-21 12:32 2018-03-28 Show GitHub Exploit DB Packet Storm
255209 8.8 HIGH
Network 		qnap media_streaming_add-on QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections. CWE-352
 Origin Validation Error 		CVE-2017-7641 2024-11-21 12:32 2018-03-8 Show GitHub Exploit DB Packet Storm
255210 9.8 CRITICAL
Network 		qnap media_streaming_add-on QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges. CWE-78
OS Command  		CVE-2017-7640 2024-11-21 12:32 2018-03-8 Show GitHub Exploit DB Packet Storm