Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
571 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41838 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
572 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-41844 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
573 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41845 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
574 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41846 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
575 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-41847 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
576 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-41848 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
577 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41852 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
578 5.1 警告
Local 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-191
CVE-2026-42326 2026-06-12 14:53 2026-06-10 Show GitHub Exploit DB Packet Storm
579 7.5 重要
Network 		Svelte project Svelte Svelte projectのSvelteにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-42567 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
580 7.5 重要
Network 		Svelte project devalue Svelte projectのdevalueにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42570 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254871 7.8 HIGH
Local 		sublimetext sublime_text_3 Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an un… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8368 2024-11-21 12:33 2017-07-6 Show GitHub Exploit DB Packet Storm
254872 7.8 HIGH
Local 		xnview xnview XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because o… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8282 2024-11-21 12:33 2017-07-6 Show GitHub Exploit DB Packet Storm
254873 9.8 CRITICAL
Network 		teltonika rut900_firmware
rut905_firmware
rut950_firmware
rut955_firmware 		The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metachara… CWE-78
OS Command  		CVE-2017-8116 2024-11-21 12:33 2017-07-4 Show GitHub Exploit DB Packet Storm
254874 5.9 MEDIUM
Network 		google android In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write. CWE-362
Race Condition 		CVE-2017-8242 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
254875 7.8 HIGH
Local 		google android In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8241 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
254876 7.8 HIGH
Local 		google android In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability. CWE-125
Out-of-bounds Read 		CVE-2017-8240 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
254877 5.5 MEDIUM
Local 		google android In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentially leading to exposure of kernel memory. CWE-200
Information Exposure 		CVE-2017-8239 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
254878 7.8 HIGH
Local 		google android In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8238 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
254879 7.8 HIGH
Local 		google android In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8237 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
254880 7.8 HIGH
Local 		google android In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-8236 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm