Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
721 7.1 重要
Local
Linux Foundation Kedro Linux FoundationのKedroにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-3840 2026-06-22 11:38 2026-06-12 Show GitHub Exploit DB Packet Storm
722 8.8 重要
Network
マイクロソフト SQL Server 2016
SQL Server 2019
SQL Server 2025
SQL Server 2022
SQL Server 2017
SQL Server のリモート コードが実行される脆弱性 New CWE-610
CWE-73
CVE-2026-40370 2026-06-22 11:38 2026-05-12 Show GitHub Exploit DB Packet Storm
723 8.8 重要
Network
マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 (オンプレミス) の特権昇格の脆弱性 New CWE-280
CWE-755
CVE-2026-40371 2026-06-22 11:38 2026-06-9 Show GitHub Exploit DB Packet Storm
724 7.2 重要
Network
VMware Spring Security VMwareのSpring Securityにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-40993 2026-06-22 11:38 2026-06-10 Show GitHub Exploit DB Packet Storm
725 8.4 重要
Network
マイクロソフト Azure Stack Edge Azure Stack Edge のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-41098 2026-06-22 11:38 2026-06-9 Show GitHub Exploit DB Packet Storm
726 5.3 警告
Network
opentelemetry opentelemetry opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 New CWE-789
過剰なサイズ値のメモリ割り当て
CVE-2026-41178 2026-06-22 11:38 2026-06-4 Show GitHub Exploit DB Packet Storm
727 4.9 警告
Network
Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-41280 2026-06-22 11:38 2026-06-17 Show GitHub Exploit DB Packet Storm
728 6.1 警告
Network
VMware Spring Security VMwareのSpring Securityにおけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト
CVE-2026-41706 2026-06-22 11:37 2026-06-10 Show GitHub Exploit DB Packet Storm
729 6.5 警告
Network
Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-42357 2026-06-22 11:37 2026-06-17 Show GitHub Exploit DB Packet Storm
730 7.2 重要
Network
OpenStack OpenStack Ironic OpenStackのOpenStack Ironicにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 New CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-42510 2026-06-22 11:37 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254311 5.5 MEDIUM
Local
microsoft windows_server_2012
windows_server_2016
windows_10
windows_8.1
windows_server_2008
windows_7
windows_rt_8.1
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and W… CWE-200
Information Exposure
CVE-2017-8679 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254312 5.5 MEDIUM
Local
microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and W… CWE-200
Information Exposure
CVE-2017-8678 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254313 5.5 MEDIUM
Local
microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008
The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Win… CWE-200
Information Exposure
CVE-2017-8677 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254314 3.3 LOW
Local
microsoft windows_rt_8.1
office_2010
live_meeting
windows_server_2012
lync
windows_server_2016
windows_7
windows_10
office
windows_8.1
office_word_viewer
skype_for_business
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, … CWE-200
Information Exposure
CVE-2017-8676 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254315 7.0 HIGH
Local
microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008
The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, an… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-8675 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254316 8.8 HIGH
Network
microsoft edge Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-8660 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254317 5.4 MEDIUM
Network
microsoft sharepoint_server Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka… CWE-79
Cross-site Scripting
CVE-2017-8629 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254318 6.8 MEDIUM
Adjacent
microsoft windows_rt_8.1
windows_10
windows_8.1
windows_server_2008
windows_7
Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsoft's implementation … NVD-CWE-noinfo
CVE-2017-8628 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254319 4.3 MEDIUM
Network
microsoft windows_10 Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles objects in memory, aka… CWE-200
Information Exposure
CVE-2017-8597 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm
254320 7.5 HIGH
Network
microsoft edge Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaS… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-8649 2024-11-21 12:34 2017-09-13 Show GitHub Exploit DB Packet Storm