|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 21, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 571 | 7 |
重要
Local |
マイクロソフト |
Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft&n… |
Windows DNS クライアントの特権の昇格の脆弱性 |
CWE-122
ヒープオーバーフロー |
CVE-2026-41108 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 572 | 7.5 |
重要
Network |
VMware | Spring Framework | VMwareのSpring Frameworkにおける不十分なランダム値の使用に関する脆弱性 |
CWE-330
不十分なランダム値の使用 |
CVE-2026-41838 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 573 | 6.1 |
警告
Network |
VMware | Spring Framework | VMwareのSpring Frameworkにおけるオープンリダイレクトの脆弱性 |
CWE-601
オープンリダイレクト |
CVE-2026-41844 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 574 | 6.1 |
警告
Network |
VMware | Spring Framework | VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-41845 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 575 | 6.1 |
警告
Network |
VMware | Spring Framework | VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-41846 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 576 | 5.3 |
警告
Network |
VMware | Spring Framework | VMwareのSpring Frameworkにおけるアクセス制御に関する脆弱性 |
CWE-284 CWE-noinfo |
CVE-2026-41847 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 577 | 7.5 |
重要
Network |
VMware | Spring Framework | VMwareのSpring Frameworkにおける非効率的な正規表現の複雑さに関する脆弱性 |
CWE-1333
非効率的な正規表現の複雑さ |
CVE-2026-41848 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 578 | 5.3 |
警告
Network |
VMware | Spring Framework | VMwareのSpring Frameworkにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-41852 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 579 | 5.1 |
警告
Local |
ImageMagick | ImageMagick | ImageMagickにおける複数の脆弱性 |
CWE-125 CWE-191 |
CVE-2026-42326 | 2026-06-12 14:53 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |
| 580 | 7.5 |
重要
Network |
Svelte project | Svelte | Svelte projectのSvelteにおける非効率的な正規表現の複雑さに関する脆弱性 |
CWE-1333
非効率的な正規表現の複雑さ |
CVE-2026-42567 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 21, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254541 | 5.5 |
MEDIUM
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8542 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254542 | 7.8 |
HIGH
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-8541 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254543 | 5.5 |
MEDIUM
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8539 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254544 | 7.8 |
HIGH
Local |
microsoft |
forefront_security malware_protection_engine windows_defender |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-8538 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254545 | 5.5 |
MEDIUM
Local |
microsoft |
windows_defender forefront_endpoint_protection security_essentials endpoint_protection system_center_endpoint_protection windows_intune_endpoint_protection exchange_server |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8537 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254546 | 5.5 |
MEDIUM
Local |
microsoft |
windows_defender forefront_endpoint_protection security_essentials endpoint_protection system_center_endpoint_protection windows_intune_endpoint_protection exchange_server |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8536 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254547 | 5.5 |
MEDIUM
Local |
microsoft |
windows_defender forefront_endpoint_protection security_essentials endpoint_protection system_center_endpoint_protection windows_intune_endpoint_protection exchange_server |
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CWE-119 CWE-369 CWE-476 CWE-674 Incorrect Access of Indexable Resource ('Range Error') Divide By Zero NULL Pointer Dereference Uncontrolled Recursion |
CVE-2017-8535 | 2024-11-21 12:34 | 2017-05-27 | Show | GitHub Exploit DB Packet Storm |
| 254548 | 7.5 |
HIGH
Network |
sap | hana_xs | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package with a filename containing a $ (dollar s… |
CWE-617
Reachable Assertion |
CVE-2017-8915 | 2024-11-21 12:34 | 2017-05-23 | Show | GitHub Exploit DB Packet Storm |
| 254549 | 8.3 |
HIGH
Network |
sap | hana_xs | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694. |
NVD-CWE-noinfo
|
CVE-2017-8914 | 2024-11-21 12:34 | 2017-05-23 | Show | GitHub Exploit DB Packet Storm |
| 254550 | 8.8 |
HIGH
Network |
sap | netweaver_application_server_java | The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a crafted XML document in a request to irj/se… |
CWE-611
XXE |
CVE-2017-8913 | 2024-11-21 12:34 | 2017-05-23 | Show | GitHub Exploit DB Packet Storm |