Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
341 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41846 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
342 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-41847 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
343 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-41848 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
344 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41852 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
345 5.1 警告
Local 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-191
CVE-2026-42326 2026-06-12 14:53 2026-06-10 Show GitHub Exploit DB Packet Storm
346 7.5 重要
Network 		Svelte project Svelte Svelte projectのSvelteにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-42567 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
347 7.5 重要
Network 		Svelte project devalue Svelte projectのdevalueにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42570 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
348 6.1 警告
Network 		Svelte project Svelte Svelte projectのSvelteにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42573 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
349 6.1 警告
Network 		Svelte project Svelte Svelte projectのSvelteにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42599 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
350 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2 		Windows 管理者保護のセキュリティ機能バイパスの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-42829 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255481 6.5 MEDIUM
Network 		cisco prime_collaboration_provisioning A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is … CWE-20
 Improper Input Validation  		CVE-2017-6792 2024-11-21 12:30 2017-09-8 Show GitHub Exploit DB Packet Storm
255482 6.7 MEDIUM
Local 		cisco meeting_server A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate their privileges to root. The attacker m… CWE-20
CWE-77
 Improper Input Validation 
Command Injection 		CVE-2017-6794 2024-11-21 12:30 2017-09-8 Show GitHub Exploit DB Packet Storm
255483 7.5 HIGH
Network 		cisco unified_communications_manager A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affe… NVD-CWE-noinfo
CVE-2017-6791 2024-11-21 12:30 2017-09-8 Show GitHub Exploit DB Packet Storm
255484 6.1 MEDIUM
Network 		cisco unified_intelligence_center A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model (DOM)… CWE-79
Cross-site Scripting 		CVE-2017-6789 2024-11-21 12:30 2017-09-8 Show GitHub Exploit DB Packet Storm
255485 7.5 HIGH
Network 		cisco iot_field_network_director
connected_grid_network_management_system 		A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventual… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2017-6780 2024-11-21 12:30 2017-09-8 Show GitHub Exploit DB Packet Storm
255486 7.5 HIGH
Network 		cisco yesmax_hd_firmware
yesmaxtotal_firmware
yesquattro_firmware 		A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of servi… NVD-CWE-noinfo
CVE-2017-6631 2024-11-21 12:30 2017-09-8 Show GitHub Exploit DB Packet Storm
255487 7.5 HIGH
Network 		heimdal_project
opensuse 		heimdal
leap 		The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path o… CWE-295
Improper Certificate Validation  		CVE-2017-6594 2024-11-21 12:30 2017-08-29 Show GitHub Exploit DB Packet Storm
255488 6.8 MEDIUM
Network 		cisco telepresence_video_communication_server A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) … NVD-CWE-noinfo
CVE-2017-6790 2024-11-21 12:30 2017-08-18 Show GitHub Exploit DB Packet Storm
255489 6.1 MEDIUM
Network 		cisco anyconnect_secure_mobility_client The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) a… CWE-79
Cross-site Scripting 		CVE-2017-6788 2024-11-21 12:30 2017-08-18 Show GitHub Exploit DB Packet Storm
255490 6.3 MEDIUM
Local 		cisco elastic_services_controller A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive information, including credentials for system accounts, on an affec… CWE-200
Information Exposure 		CVE-2017-6786 2024-11-21 12:30 2017-08-18 Show GitHub Exploit DB Packet Storm