Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
651 7.2 重要
Network 		MariaDB Corporation Ab. MariaDB MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-48163 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
652 7.2 重要
Network 		MariaDB Corporation Ab. MariaDB MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-48165 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
653 7.8 重要
Local 		レッドハット
X.Org Foundation		 X.Org X Server
Red Hat Enterprise Linux
xwayland 		レッドハット等の複数ベンダの製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-50264 2026-06-17 15:39 2026-06-5 Show GitHub Exploit DB Packet Storm
654 7.5 重要
Network 		Express.js Multer Express.jsのMulterにおける不完全なクリーンアップに関する脆弱性 CWE-459
不完全なクリーンアップ 		CVE-2026-5038 2026-06-17 15:39 2026-06-15 Show GitHub Exploit DB Packet Storm
655 7.5 重要
Network 		Express.js Multer Express.jsのMulterにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-5079 2026-06-17 15:39 2026-06-15 Show GitHub Exploit DB Packet Storm
656 8.1 重要
Network 		Zoom Video Communications, Inc. Zoom Meeting SDK
Zoom Workplace 		Zoom Video Communications, Inc.のZoom Meeting SDK等の複数製品におけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性 CWE-939
カスタム URL スキームのハンドラの不適切な認可 		CVE-2026-53408 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
657 6.6 警告
Local 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-53820 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
658 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-53821 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
659 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける複数の脆弱性 CWE-367
CWE-77
CVE-2026-53822 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
660 8.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-53823 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256271 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description paramet… CWE-79
Cross-site Scripting 		CVE-2017-6555 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256272 7.5 HIGH
Network 		sagemcom livebox_firmware Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue… CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-6552 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256273 8.8 HIGH
Network 		asus rt-ac53_firmware Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B… CWE-287
Improper Authentication 		CVE-2017-6549 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256274 9.8 CRITICAL
Network 		asus rt-ac53_firmware Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-A… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-6548 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256275 7.5 HIGH
Network 		synchro bbs Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string in the HTTP Referer header. NVD-CWE-noinfo
CVE-2017-6371 2024-11-21 12:29 2020-02-27 Show GitHub Exploit DB Packet Storm
256276 8.1 HIGH
Network 		libgd libgd In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since t… CWE-125
Out-of-bounds Read 		CVE-2017-6363 2024-11-21 12:29 2020-02-27 Show GitHub Exploit DB Packet Storm
256277 6.1 MEDIUM
Network 		paypal adaptive_payments_sdk paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution CWE-79
Cross-site Scripting 		CVE-2017-6217 2024-11-21 12:29 2019-07-11 Show GitHub Exploit DB Packet Storm
256278 6.1 MEDIUM
Network 		novaksolutions infusionsoft-php-sdk novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution CWE-79
Cross-site Scripting 		CVE-2017-6216 2024-11-21 12:29 2019-07-4 Show GitHub Exploit DB Packet Storm
256279 7.8 HIGH
Local 		nvidia vibrante_linux NVIDIA Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclos… CWE-20
 Improper Input Validation  		CVE-2017-6261 2024-11-21 12:29 2019-06-5 Show GitHub Exploit DB Packet Storm
256280 5.3 MEDIUM
Network 		wordpress wordpress WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "auth… CWE-200
Information Exposure 		CVE-2017-6514 2024-11-21 12:29 2019-05-23 Show GitHub Exploit DB Packet Storm