Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
691 9.9 緊急
Network 		- オラクルのEnterprise Manager Base Platformにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46855 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
692 9.6 緊急
Network 		- オラクルのEnterprise Manager Base Platformにおけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-noinfo
CVE-2026-46856 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
693 9.8 緊急
Network 		- オラクルのEnterprise Manager Base Platformにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46857 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
694 9.1 緊急
Network 		オラクル Oracle Application Performance Management オラクルのOracle Application Performance Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46858 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
695 9.8 緊急
Network 		オラクル Oracle Agile PLM オラクルのOracle Agile PLMにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-46859 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
696 7.5 重要
Network 		オラクル MySQL Cluster
MySQL Server 		オラクルのMySQL Cluster等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-46863 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
697 8.8 重要
Network 		- オラクルのEnterprise Manager Base Platformにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46864 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
698 8.2 重要
Local 		- オラクルのEnterprise Manager Base Platformにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46865 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
699 8.2 重要
Network 		- オラクルのEnterprise Manager Base Platformにおけるリソースの枯渇に関する脆弱性 CWE-400
CWE-noinfo
CVE-2026-46866 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
700 7.2 重要
Network 		- オラクルのEnterprise Manager Base Platformにおける権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-46867 2026-06-22 11:52 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256641 9.8 CRITICAL
Network 		tnef_project tnef An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2017-8911 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256642 5.5 MEDIUM
Local 		artifex ghostscript The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document. CWE-125
Out-of-bounds Read 		CVE-2017-8908 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256643 4.6 MEDIUM
Physics 		lightdm_project lightdm LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users… NVD-CWE-noinfo
CVE-2017-8900 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256644 5.5 MEDIUM
Local 		multicorewareinc x265_high_efficiency_video_coding An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and ot… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2017-8906 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256645 8.8 HIGH
Local 		xen xen Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215. CWE-682
 Incorrect Calculation 		CVE-2017-8905 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256646 8.8 HIGH
Local 		xen xen Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the… NVD-CWE-noinfo
CVE-2017-8904 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256647 8.8 HIGH
Local 		xen xen Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213. NVD-CWE-noinfo
CVE-2017-8903 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256648 5.9 MEDIUM
Network 		oneplus oxygenos An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA images, the fact that both products use the same OTA verification keys, and the fact… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2017-8851 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256649 5.9 MEDIUM
Network 		oneplus oxygenos An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA images, and the fact that both ROMs use the same OTA verification keys, attackers c… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2017-8850 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
256650 9.8 CRITICAL
Network 		invisioncommunity invision_power_board Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack use… CWE-79
Cross-site Scripting 		CVE-2017-8898 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm