Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1 - - （複数のベンダ） （複数の製品） Vendor-signed UEFIアプリケーションにおけるセキュアブートバイパスの脆弱性 New - - 2026-06-22 17:17 2026-06-19 Show GitHub Exploit DB Packet Storm
2 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年06月18日） New - - 2026-06-22 17:17 2026-06-19 Show GitHub Exploit DB Packet Storm
3 8.4 重要
Local 		マイクロソフト Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft Office 365
Microsoft Office 2024 Long-Term Servicing Ch… 		Microsoft Office のリモート コードが実行される脆弱性 New CWE-416
CWE-787
CVE-2026-45474 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
4 7.8 重要
Local 		マイクロソフト Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft Office 365
Microsoft Office 2024 Long-Term Servicing Ch… 		Microsoft Office のリモート コードが実行される脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-45475 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
5 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft Office Project Server のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45483 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
6 7.8 重要
Local 		マイクロソフト .NET .NET SDK の特権昇格の脆弱性 New CWE-285
CWE-863
CVE-2026-45490 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
7 5.5 警告
Local 		マイクロソフト .NET .NET の改ざんの脆弱性 New CWE-59
リンク解釈の問題 		CVE-2026-45491 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
8 6.1 警告
Network 		マイクロソフト Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server 		Microsoft Exchange Server のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45500 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
9 8.1 重要
Network 		マイクロソフト Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server 		Microsoft Exchange Server のリモートでコードが実行される脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-45583 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
10 7.5 重要
Network 		マイクロソフト Microsoft Visual Studio 2026
.NET
ASP.NET Core 		ASP.NET Core のサービス拒否の脆弱性 New CWE-400
CWE-noinfo
CVE-2026-45591 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257281 6.1 MEDIUM
Network 		schneider_electric homelynk_controller_lss100100_firmware An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be… CWE-79
Cross-site Scripting 		CVE-2017-5157 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257282 7.3 HIGH
Network 		schneider-electric wonderware_historian An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian creates logins with default passwords, which can allow a malicious entity to compr… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2017-5155 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257283 9.8 CRITICAL
Network 		advantech webaccess An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack… CWE-89
SQL Injection 		CVE-2017-5154 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257284 7.8 HIGH
Local 		osisoft pi_coresight
pi_web_api 		An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure thr… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2017-5153 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257285 9.1 CRITICAL
Network 		advantech webaccess An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access pages unrestricted (AUTHENTICA… CWE-287
Improper Authentication 		CVE-2017-5152 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257286 7.3 HIGH
Network 		panasonic video_insight_web_client An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution. CWE-89
SQL Injection 		CVE-2017-5151 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257287 7.5 HIGH
Network 		carlosgavazzi vmu-c_em_firmware
vmu-c_pv_firmware 		An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text. CWE-200
Information Exposure 		CVE-2017-5146 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257288 10.0 CRITICAL
Network 		carlosgavazzi vmu-c_em_firmware
vmu-c_pv_firmware 		An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vuln… CWE-352
 Origin Validation Error 		CVE-2017-5145 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257289 9.8 CRITICAL
Network 		carlosgavazzi vmu-c_em_firmware
vmu-c_pv_firmware 		An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions wi… NVD-CWE-noinfo
CVE-2017-5144 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm
257290 8.6 HIGH
Network 		honeywell xl_web_ii_controller An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal… CWE-22
Path Traversal 		CVE-2017-5143 2024-11-21 12:27 2017-02-14 Show GitHub Exploit DB Packet Storm