Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
681 7.5 重要
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-9076 2026-06-17 15:38 2026-06-9 Show GitHub Exploit DB Packet Storm
682 8.1 重要
Network
F5 Networks nginx open source
NGINX plus
F5 Networksのnginx open source等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-9256 2026-06-17 15:37 2026-05-22 Show GitHub Exploit DB Packet Storm
683 4.3 警告
Network
webpack.js webpack-dev-server webpackのwebpack-dev-serverにおける複数の脆弱性 CWE-346
CWE-441
CVE-2026-9595 2026-06-17 15:37 2026-06-15 Show GitHub Exploit DB Packet Storm
684 8.8 重要
Network
Trychroma ChromaDB TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-45830 2026-06-17 15:37 2026-06-12 Show GitHub Exploit DB Packet Storm
685 8.8 重要
Network
Trychroma ChromaDB TrychromaのChromaDBにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-45831 2026-06-17 15:37 2026-06-12 Show GitHub Exploit DB Packet Storm
686 8.8 重要
Network
Trychroma ChromaDB TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-45832 2026-06-17 15:37 2026-06-12 Show GitHub Exploit DB Packet Storm
687 8.8 重要
Network
Trychroma ChromaDB TrychromaのChromaDBにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-45833 2026-06-17 15:37 2026-06-12 Show GitHub Exploit DB Packet Storm
688 7.5 重要
Network
OpenStack OpenStack Ironic OpenStackのOpenStack Ironicにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-50589 2026-06-17 15:37 2026-06-5 Show GitHub Exploit DB Packet Storm
689 7.5 重要
Network
Dalibo SARL SCOP PostgreSQL Anonymizer Dalibo SARL SCOPのPostgreSQL AnonymizerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-11945 2026-06-17 15:37 2026-06-11 Show GitHub Exploit DB Packet Storm
690 7.8 重要
Local
Foxit Foxit AI FoxitのFoxit AIにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
CWE-829
CVE-2026-12057 2026-06-17 15:37 2026-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256261 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id. CWE-89
SQL Injection
CVE-2017-6573 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256262 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_member.php with the GET Parameter: filter_… CWE-89
SQL Injection
CVE-2017-6572 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256263 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: i… CWE-89
SQL Injection
CVE-2017-6571 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256264 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Paramet… CWE-89
SQL Injection
CVE-2017-6570 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256265 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6562 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256266 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6561 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256267 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6560 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256268 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6559 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256269 9.8 CRITICAL
Network
iball ib-wra150n_firmware iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router… CWE-798
 Use of Hard-coded Credentials
CVE-2017-6558 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256270 5.4 MEDIUM
Network
cmsmadesimple cms_made_simple Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings … CWE-79
Cross-site Scripting
CVE-2017-6556 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm