Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
651 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 New CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35077 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
652 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 New CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35078 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
653 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 New CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35079 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
654 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 New CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35080 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
655 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-35081 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
656 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-35082 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
657 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-35083 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
658 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-35084 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
659 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-35085 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
660 7.5 重要
Network 		レッドハット
GNU Project		 Redhat Enterprise Linux For Power Little Endian Els
Red Hat Enterprise Linux for IBM z Systems - Extended Updat… 		GNU Project等の複数ベンダの製品におけるAPI への入力に対する未定義の動作に関する脆弱性 New CWE-475
API への入力に対する未定義の動作 		CVE-2026-42009 2026-06-9 14:11 2026-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255331 6.5 MEDIUM
Local 		virglrenderer_project virglrenderer The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroyin… CWE-476
 NULL Pointer Dereference 		CVE-2017-6210 2024-11-21 12:29 2017-03-15 Show GitHub Exploit DB Packet Storm
255332 6.5 MEDIUM
Local 		virglrenderer_project virglrenderer Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a den… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-6209 2024-11-21 12:29 2017-03-15 Show GitHub Exploit DB Packet Storm
255333 7.8 HIGH
Local 		artifex
debian 		mupdf
debian_linux 		Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via a crafted image. CWE-787
 Out-of-bounds Write 		CVE-2017-6060 2024-11-21 12:29 2017-03-15 Show GitHub Exploit DB Packet Storm
255334 6.7 MEDIUM
Local 		magnicomp sysinfo A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges. Parts of SysInfo require setuid-… CWE-20
 Improper Input Validation  		CVE-2017-6516 2024-11-21 12:29 2017-03-15 Show GitHub Exploit DB Packet Storm
255335 5.5 MEDIUM
Local 		graphicsmagick graphicsmagick The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a small samp… CWE-125
Out-of-bounds Read 		CVE-2017-6335 2024-11-21 12:29 2017-03-14 Show GitHub Exploit DB Packet Storm
255336 8.8 HIGH
Network 		trendmicro interscan_messaging_security_virtual_appliance An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user (which is … CWE-78
NVD-CWE-noinfo
OS Command  		CVE-2017-6398 2024-11-21 12:29 2017-03-14 Show GitHub Exploit DB Packet Storm
255337 7.5 HIGH
Network 		cerberusftp ftp_server In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header. CWE-20
 Improper Input Validation  		CVE-2017-6367 2024-11-21 12:29 2017-03-14 Show GitHub Exploit DB Packet Storm
255338 8.8 HIGH
Network 		keekoonvision kk002_ip_camera_firmware Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and the entire set of other pages). CWE-352
 Origin Validation Error 		CVE-2017-6180 2024-11-21 12:29 2017-03-13 Show GitHub Exploit DB Packet Storm
255339 8.8 HIGH
Network 		zammad zammad A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for u… CWE-352
 Origin Validation Error 		CVE-2017-6081 2024-11-21 12:29 2017-03-13 Show GitHub Exploit DB Packet Storm
255340 9.8 CRITICAL
Network 		zammad zammad An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involving HTTP Access-Control headers. To exploit the vulnerabilit… CWE-352
 Origin Validation Error 		CVE-2017-6080 2024-11-21 12:29 2017-03-13 Show GitHub Exploit DB Packet Storm