Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
651 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Microsoft DWM Core ライブラリの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-45637 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
652 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-45638 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
653 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows Bluetooth ポート ドライバーの特権昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-45640 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
654 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-125
CWE-843
CVE-2026-45641 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
655 3.9
Physics
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Microsoft Azure 構成証明サービスとデバイス正常性構成証明サービスのなりすましの脆弱性 CWE-20
不適切な入力確認
CVE-2026-45642 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
656 8.8 重要
Network
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2022
Windows Active Directory ドメイン サービス のリモートでコードが実行される脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-45648 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
657 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows カーネルの特権の昇格の脆弱性 CWE-122
CWE-416
CVE-2026-45653 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
658 7.9 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-45654 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
659 5.3 警告
Physics
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows BitLocker セキュリティ機能バイパスの脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-45655 2026-06-12 14:49 2026-06-9 Show GitHub Exploit DB Packet Storm
660 5.3 警告
Network
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-400
CWE-407
CWE-674
CVE-2026-45664 2026-06-12 14:49 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256121 9.8 CRITICAL
Network
libraw libraw-demosaic-pack-gpl2 An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow. CWE-190
 Integer Overflow or Wraparound
CVE-2017-6889 2024-11-21 12:30 2017-05-16 Show GitHub Exploit DB Packet Storm
256122 4.9 MEDIUM
Network
siemens simatic_wincc_\(tia_portal\)
simatic_wincc
simatic_wincc_runtime
A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Pr… CWE-20
 Improper Input Validation 
CVE-2017-6867 2024-11-21 12:30 2017-05-11 Show GitHub Exploit DB Packet Storm
256123 6.5 MEDIUM
Adjacent
siemens sinaut_st7cc
simatic_step_7_\(tia_portal\)
simatic_winac_rtx_2010
simatic_wincc_\(tia_portal\)
sinumerik_808d_programming_tool
simatic_winac_rtx_f_2010
simatic_wincc_flexible_2008
A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS… CWE-20
 Improper Input Validation 
CVE-2017-6865 2024-11-21 12:30 2017-05-11 Show GitHub Exploit DB Packet Storm
256124 7.8 HIGH
Local
gemalto smartdiag_diagnosis_tool Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of local code execution with untrusted inpu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-6953 2024-11-21 12:30 2017-05-9 Show GitHub Exploit DB Packet Storm
256125 8.8 HIGH
Network
xirrus arrayos SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2017-6557 2024-11-21 12:30 2017-05-5 Show GitHub Exploit DB Packet Storm
256126 5.3 MEDIUM
Network
cisco unity_connection A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected devi… CWE-22
Path Traversal
CVE-2017-6629 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm
256127 6.8 MEDIUM
Network
cisco wide_area_application_services A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of s… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2017-6628 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm
256128 5.3 MEDIUM
Network
cisco ios A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a conf… CWE-287
Improper Authentication
CVE-2017-6624 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm
256129 5.3 MEDIUM
Network
cisco unified_contact_center_enterprise A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve informatio… CWE-200
Information Exposure
CVE-2017-6626 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm
256130 7.1 HIGH
Network
cisco firepower_threat_defense A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow … NVD-CWE-noinfo
CVE-2017-6625 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm