Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
831 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45465 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
832 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45479 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
833 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 25h2 		Windows カーネルモード ドライバーの特権の昇格の脆弱性 CWE-843
型の取り違え 		CVE-2026-45600 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
834 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2012
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Wind… 		UEFI セキュア ブートのセキュリティ機能バイパスの脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-45656 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
835 9.8 緊急
Network 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows Server 2022
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows カーネルのリモートでコードが実行される脆弱性 CWE-122
CWE-416
CVE-2026-45657 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
836 6.8 警告
Physics 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2012
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Wind… 		Windows BitLocker セキュリティ機能バイパスの脆弱性 CWE-284
CWE-noinfo
CVE-2026-45658 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
837 7.5 重要
Network 		FreeSWITCH FreeSWITCH FreeSWITCHにおけるDTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 CWE-776
DTD の再帰的なエンティティ参照の不適切な制限 		CVE-2026-45771 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
838 4.3 警告
Network 		University at Buffalo Open XDMoD University at BuffaloのOpen XDMoDにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-45776 2026-06-11 16:23 2026-06-5 Show GitHub Exploit DB Packet Storm
839 9.8 緊急
Network 		University at Buffalo Open XDMoD University at BuffaloのOpen XDMoDにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-45777 2026-06-11 16:23 2026-06-5 Show GitHub Exploit DB Packet Storm
840 5.4 警告
Network 		University at Buffalo Open XDMoD University at BuffaloのOpen XDMoDにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45778 2026-06-11 16:23 2026-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254561 7.5 HIGH
Network 		flightgear flightgear In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan (XML). … CWE-22
Path Traversal 		CVE-2017-8921 2024-11-21 12:34 2017-05-13 Show GitHub Exploit DB Packet Storm
254562 7.2 HIGH
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related to the CreateTagFunction and CallUserTa… CWE-94
Code Injection 		CVE-2017-8912 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254563 9.8 CRITICAL
Network 		tnef_project tnef An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2017-8911 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254564 5.5 MEDIUM
Local 		artifex ghostscript The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document. CWE-125
Out-of-bounds Read 		CVE-2017-8908 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254565 4.6 MEDIUM
Physics 		lightdm_project lightdm LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users… NVD-CWE-noinfo
CVE-2017-8900 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254566 5.5 MEDIUM
Local 		multicorewareinc x265_high_efficiency_video_coding An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and ot… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2017-8906 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254567 8.8 HIGH
Local 		xen xen Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215. CWE-682
 Incorrect Calculation 		CVE-2017-8905 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254568 8.8 HIGH
Local 		xen xen Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the… NVD-CWE-noinfo
CVE-2017-8904 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254569 8.8 HIGH
Local 		xen xen Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213. NVD-CWE-noinfo
CVE-2017-8903 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm
254570 5.9 MEDIUM
Network 		oneplus oxygenos An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA images, the fact that both products use the same OTA verification keys, and the fact… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2017-8851 2024-11-21 12:34 2017-05-12 Show GitHub Exploit DB Packet Storm