Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
911 7.5 重要
Network
Steve Sanbeg Etsy::StatsD Steve SanbegのEtsy::StatsDにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-46741
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
912 9.8 緊急
Network
Advanced Micro Devices (AMD) AITER (AI Tensor Engine for ROCm) Advanced Micro Devices (AMD)のAITER (AI Tensor Engine for ROCm)における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-49121 2026-06-9 14:10 2026-06-1 Show GitHub Exploit DB Packet Storm
913 9.8 緊急
Network
日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-49200 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
914 9.8 緊急
Network
日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2026-49201 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
915 6.5 警告
Network
RRWO (Robert Rothenberg) Net::CIDR::Set RRWO (Robert Rothenberg)のNet::CIDR::Setにおける安全でない等式による入力の不適切な検証に関する脆弱性 CWE-1289
安全でない等式による入力の不適切な検証
CVE-2026-49940 2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
916 7.5 重要
Network
RRWO (Robert Rothenberg) Net::CIDR::Set RRWO (Robert Rothenberg)のNet::CIDR::Setにおける複数の脆弱性 CWE-1287
CWE-674
CVE-2026-49941 2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
917 7.3 重要
Network
RRWO (Robert Rothenberg) Net::CIDR::Set RRWO (Robert Rothenberg)のNet::CIDR::Setにおける安全でない等式による入力の不適切な検証に関する脆弱性 CWE-1289
安全でない等式による入力の不適切な検証
CVE-2026-49942 2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
918 6.5 警告
Network
Tom Molesworth (TEAM) Net::Async::Statsd::Client Tom Molesworth (TEAM)のNet::Async::Statsd::ClientにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-8722
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
919 7.5 重要
Network
OALDERS (Olaf Alders) HTML::Entities OALDERS (Olaf Alders)のHTML::Entitiesにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-8829 2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
920 5 警告
Network
レッドハット Red Hat OpenShift Container Platform レッドハットのRed Hat OpenShift Container Platformにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-10533 2026-06-9 14:10 2026-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255241 8.8 HIGH
Network
tigervnc tigervnc In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution. CWE-415
 Double Free
CVE-2017-7393 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255242 7.5 HIGH
Network
tigervnc tigervnc In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2017-7392 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255243 6.1 MEDIUM
Network
magmi_project magmi A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the 'magmi-git-master/magmi/web/ajax_ge… CWE-79
Cross-site Scripting
CVE-2017-7391 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255244 6.1 MEDIUM
Network
socialnetwork_project socialnetwork A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/tem… CWE-79
Cross-site Scripting
CVE-2017-7390 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255245 6.1 MEDIUM
Network
openeclass openeclass Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data (meeting_id, user) passed to the 'ope… CWE-79
Cross-site Scripting
CVE-2017-7389 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255246 6.1 MEDIUM
Network
wallaceit wallacepos A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data (token) passed to the 'wallacepos-master/myaccount/re… CWE-79
Cross-site Scripting
CVE-2017-7388 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255247 6.1 MEDIUM
Network
helpmewatchwho_project helpmewatchwho TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter). CWE-79
Cross-site Scripting
CVE-2017-7387 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255248 6.1 MEDIUM
Network
symetrie_project symetrie citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter). CWE-79
Cross-site Scripting
CVE-2017-7386 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255249 7.8 HIGH
Local
linux linux_kernel Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring… CWE-476
CWE-416
 NULL Pointer Dereference
 Use After Free
CVE-2017-7374 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255250 6.1 MEDIUM
Network
lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack. CWE-79
Cross-site Scripting
CVE-2017-7363 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm