Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
351 6.1 警告
Network 		Svelte project Svelte Svelte projectのSvelteにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42599 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
352 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2 		Windows 管理者保護のセキュリティ機能バイパスの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-42829 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
353 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows Function Discovery Service (fdwsd.dll) の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-42836 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
354 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft … 		Windows Projected File System の特権の昇格の脆弱性 CWE-125
境界外読み取り 		CVE-2026-42837 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
355 9.6 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-284
CWE-639
CWE-915
CVE-2026-42861 2026-06-12 14:52 2026-06-8 Show GitHub Exploit DB Packet Storm
356 5 警告
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-284
CWE-639
CWE-915
CVE-2026-42862 2026-06-12 14:52 2026-06-8 Show GitHub Exploit DB Packet Storm
357 8.1 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-284
CWE-639
CWE-915
CVE-2026-42863 2026-06-12 14:52 2026-06-8 Show GitHub Exploit DB Packet Storm
358 6.5 警告
Network 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows Kerberos のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42903 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
359 9.6 緊急
Adjacent 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows TCP/IP の特権昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-42904 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
360 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows DWM Core ライブラリの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-42905 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255191 8.8 HIGH
Network 		debian
redhat
mozilla 		debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
fir… 		A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash bu… CWE-416
 Use After Free 		CVE-2017-7752 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255192 9.8 CRITICAL
Network 		debian
redhat
mozilla 		debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
fir… 		A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially… CWE-416
 Use After Free 		CVE-2017-7750 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
255193 9.8 CRITICAL
Network 		abb ip_gateway_firmware In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access. CWE-522
 Insufficiently Protected Credentials 		CVE-2017-7933 2024-11-21 12:32 2018-06-7 Show GitHub Exploit DB Packet Storm
255194 9.8 CRITICAL
Network 		abb ip_gateway_firmware In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without au… CWE-287
Improper Authentication 		CVE-2017-7931 2024-11-21 12:32 2018-06-7 Show GitHub Exploit DB Packet Storm
255195 8.8 HIGH
Network 		abb ip_gateway_firmware In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating tha… CWE-352
 Origin Validation Error 		CVE-2017-7906 2024-11-21 12:32 2018-06-7 Show GitHub Exploit DB Packet Storm
255196 5.3 MEDIUM
Network 		qnap nas_proxy_server QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server. CWE-287
Improper Authentication 		CVE-2017-7639 2024-11-21 12:32 2018-06-6 Show GitHub Exploit DB Packet Storm
255197 9.8 CRITICAL
Network 		qnap nas_proxy_server QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges. CWE-78
OS Command  		CVE-2017-7637 2024-11-21 12:32 2018-06-6 Show GitHub Exploit DB Packet Storm
255198 6.1 MEDIUM
Network 		qnap nas_proxy_server Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to inject arbitrary web script or HTML. CWE-79
Cross-site Scripting 		CVE-2017-7636 2024-11-21 12:32 2018-06-6 Show GitHub Exploit DB Packet Storm
255199 8.8 HIGH
Network 		qnap nas_proxy_server QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections. CWE-352
 Origin Validation Error 		CVE-2017-7635 2024-11-21 12:32 2018-06-6 Show GitHub Exploit DB Packet Storm
255200 7.5 HIGH
Network 		eclipse
debian 		mosquitto
debian_linux 		In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of serv… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-7654 2024-11-21 12:32 2018-06-6 Show GitHub Exploit DB Packet Storm