Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
351 4.3 警告
Network 		Splunk Splunk AI Toolkit SplunkのSplunk AI Toolkitにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-20265 2026-06-23 10:00 2026-06-17 Show GitHub Exploit DB Packet Storm
352 9.1 緊急
Network 		Splunk Splunk AI Toolkit SplunkのSplunk AI ToolkitにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-20266 2026-06-23 10:00 2026-06-17 Show GitHub Exploit DB Packet Storm
353 5.9 警告
Network 		VMware Spring Data MongoDB VMwareのSpring Data MongoDBにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41696 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
354 8.1 重要
Network 		VMware Spring Data MongoDB VMwareのSpring Data MongoDBにおける言語構文の表現に使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-917
言語構文の表現に使用される特殊な要素の不適切な無効化 		CVE-2026-41717 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
355 6.5 警告
Network 		VMware spring for apache kafka VMwareのspring for apache kafkaにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-41727 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
356 7.5 重要
Network 		VMware Spring Data REST VMwareのSpring Data RESTにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41728 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
357 8.1 重要
Network 		VMware Spring Data REST VMwareのSpring Data RESTにおける言語構文の表現に使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-917
言語構文の表現に使用される特殊な要素の不適切な無効化 		CVE-2026-41729 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
358 5.3 警告
Network 		VMware Spring Data REST VMwareのSpring Data RESTにおけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2026-41730 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
359 8.1 重要
Network 		VMware spring for apache kafka VMwareのspring for apache kafkaにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-41731 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
360 5.3 警告
Network 		VMware Spring Data REST VMwareのSpring Data RESTにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41837 2026-06-23 10:00 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254231 7.5 HIGH
Network 		microsoft asp.net_core ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Infor… NVD-CWE-noinfo
CVE-2017-8700 2024-11-21 12:34 2017-11-15 Show GitHub Exploit DB Packet Storm
254232 5.5 MEDIUM
Local 		postgresql postgresql The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debia… CWE-59
Link Following 		CVE-2017-8806 2024-11-21 12:34 2017-11-13 Show GitHub Exploit DB Packet Storm
254233 9.1 CRITICAL
Network 		debian ftpsync Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror. CWE-22
Path Traversal 		CVE-2017-8805 2024-11-21 12:34 2017-10-18 Show GitHub Exploit DB Packet Storm
254234 4.3 MEDIUM
Network 		microsoft edge Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how affected Microsoft s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8726 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254235 5.3 MEDIUM
Local 		microsoft windows_server_2016
windows_10 		The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Windows… NVD-CWE-noinfo
CVE-2017-8715 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254236 5.5 MEDIUM
Local 		microsoft windows_10 The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles objects in memory, aka "Windows Subsystem for Linux Denial o… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8703 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254237 5.5 MEDIUM
Local 		microsoft windows_server_2016
windows_10 		The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, ak… CWE-200
Information Exposure 		CVE-2017-8693 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254238 7.5 HIGH
Network 		microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008 		Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execut… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8727 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254239 7.8 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008 		The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8718 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254240 7.8 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008 		The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8717 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm