Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
581 5.7 警告
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-120
CWE-125
CVE-2026-0165 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
582 6.4 警告
Network
ネットギア RBE371 FIRMWARE
RBE372 FIRMWARE
RBE370 FIRMWARE
RBE374 FIRMWARE
ネットギアのRBE370 FIRMWARE等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-0409 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
583 4.5 警告
Adjacent
ネットギア JR6150 ファームウェア ネットギアのJR6150 ファームウェアにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-0412 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
584 4.5 警告
Adjacent
ネットギア RBRE950 FIRMWARE
RBR750 ファームウェア
RBE770 FIRMWARE
RBS750 ファームウェア
RBS860 FIRMWARE
RBR860 FIRMWARE
RBR840 ファームウェア
RBE370 FIRMWARE
RBRE960&n…
ネットギアのRBE370 FIRMWARE等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-0413 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
585 4.5 警告
Adjacent
ネットギア RBE970 FIRMWARE ネットギアのRBE970 FIRMWAREにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-0414 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
586 4.5 警告
Adjacent
ネットギア RBRE950 FIRMWARE
RBR750 ファームウェア
RBS750 ファームウェア
RBS860 FIRMWARE
RBR860 FIRMWARE
RBE970 FIRMWARE
RBR840 ファームウェア
RBRE960 ファームウェア
RBSE960&n…
ネットギアのRBE970 FIRMWARE等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-0415 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
587 4.5 警告
Adjacent
ネットギア RAXE450 Firmware
RAXE500 Firmware
ネットギアのRAXE450 Firmware等の複数製品における入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-0416 2026-06-22 11:44 2026-06-9 Show GitHub Exploit DB Packet Storm
588 8 重要
Adjacent
ネットギア JR6150 ファームウェア ネットギアのJR6150 ファームウェアにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-0419 2026-06-22 11:44 2026-06-9 Show GitHub Exploit DB Packet Storm
589 5.9 警告
Network
ネットギア RAX35 ファームウェア
RAX38 ファームウェア
ネットギアのRAX120 ファームウェア等の複数製品における暗号化処理の不備に関する脆弱性 CWE-325
暗号化処理の不備
CVE-2026-0420 2026-06-22 11:44 2026-06-9 Show GitHub Exploit DB Packet Storm
590 7.5 重要
Network
Stichting NLnet Labs ldns NLnet LabsのLDNSにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-10846 2026-06-22 11:44 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254241 7.0 HIGH
Local
microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008
The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… NVD-CWE-noinfo
CVE-2017-8694 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254242 7.0 HIGH
Local
microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008
The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… NVD-CWE-noinfo
CVE-2017-8689 2024-11-21 12:34 2017-10-13 Show GitHub Exploit DB Packet Storm
254243 8.8 HIGH
Network
elastic x-pack An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privil… CWE-269
 Improper Privilege Management
CVE-2017-8448 2024-11-21 12:34 2017-09-29 Show GitHub Exploit DB Packet Storm
254244 6.5 MEDIUM
Network
elastic x-pack An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either 'delete' or 'index' permissions on an index in a cluster, they may be able to issue both delete an… CWE-269
 Improper Privilege Management
CVE-2017-8447 2024-11-21 12:34 2017-09-29 Show GitHub Exploit DB Packet Storm
254245 5.9 MEDIUM
Network
elasticsearch cloud_enterprise The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the clien… NVD-CWE-noinfo
CVE-2017-8444 2024-11-21 12:34 2017-09-29 Show GitHub Exploit DB Packet Storm
254246 9.8 CRITICAL
Network
twsz wifi_repeater_firmware On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root") and can: 1. Read the entire file syst… CWE-798
 Use of Hard-coded Credentials
CVE-2017-8772 2024-11-21 12:34 2017-09-20 Show GitHub Exploit DB Packet Storm
254247 9.8 CRITICAL
Network
twsz wifi_repeater_firmware On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root"). The attacker can make a user that is… CWE-798
 Use of Hard-coded Credentials
CVE-2017-8771 2024-11-21 12:34 2017-09-20 Show GitHub Exploit DB Packet Storm
254248 7.5 HIGH
Network
twsz wifi_repeater_firmware There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter. CWE-200
Information Exposure
CVE-2017-8770 2024-11-21 12:34 2017-09-20 Show GitHub Exploit DB Packet Storm
254249 6.1 MEDIUM
Network
microsoft exchange_server Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Cross-Sit… CWE-79
Cross-site Scripting
CVE-2017-8758 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254250 7.5 HIGH
Network
microsoft edge Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way Microsoft Edge h… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-8757 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm