Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
991 5.8 警告
Network
F5 Networks nginx open source
NGINX Gateway Fabric
NGINX Ingress Controller
NGINX Instance Manager
F5 NetworksのNGINX Gateway Fabric等の複数製品におけるエンコーディングエラーに関する脆弱性 CWE-172
エンコーディングエラー
CVE-2026-42926 2026-06-22 11:37 2026-05-13 Show GitHub Exploit DB Packet Storm
992 8.7 重要
Network
F5 Networks BIG-IP WebSafe
big-ip container ingress services
BIG-IP Application Security Manager (ASM)
BIG-IP Advanced Web Application Firewal…
F5 NetworksのBIG-IP Access Policy Manager (APM)等の複数製品におけるパストラバーサルの脆弱性 CWE-35
パストラバーサル
CVE-2026-42930 2026-06-22 11:37 2026-05-13 Show GitHub Exploit DB Packet Storm
993 4.8 警告
Network
F5 Networks nginx open source
DoS
NGINX plus
NGINX Gateway Fabric
WAF
NGINX Instance Manager
NGINX Ingress Controller
F5 NetworksのDoS等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-42934 2026-06-22 11:37 2026-05-13 Show GitHub Exploit DB Packet Storm
994 6.5 警告
Network
F5 Networks BIG-IP WebSafe
big-ip container ingress services
BIG-IP Application Security Manager (ASM)
BIG-IP Advanced Web Application Firewal…
F5 NetworksのBIG-IP Access Policy Manager (APM)等の複数製品における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-42937 2026-06-22 11:37 2026-05-13 Show GitHub Exploit DB Packet Storm
995 8.1 重要
Network
F5 Networks nginx open source
DoS
NGINX plus
NGINX Gateway Fabric
WAF
NGINX Instance Manager
NGINX Ingress Controller
F5 NetworksのDoS等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-42945 2026-06-22 11:37 2026-05-13 Show GitHub Exploit DB Packet Storm
996 7.7 重要
Network
OpenStack OpenStack Ironic OpenStackのOpenStack Ironicにおける領域間での誤ったリソース移動に関する脆弱性 CWE-669
領域間での誤ったリソース移動
CVE-2026-42997 2026-06-22 11:37 2026-05-5 Show GitHub Exploit DB Packet Storm
997 8 重要
Network
MariaDB Corporation Ab. MariaDB MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-44168 2026-06-22 11:37 2026-06-12 Show GitHub Exploit DB Packet Storm
998 4.3 警告
Network
MariaDB Corporation Ab. MariaDB MariaDB Corporation Ab.のMariaDBにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-44169 2026-06-22 11:37 2026-06-12 Show GitHub Exploit DB Packet Storm
999 6.1 警告
Network
CarrierWave project CarrierWave CarrierWave projectのCarrierWaveにおける複数の脆弱性 CWE-184
CWE-625
CWE-79
CVE-2026-44587 2026-06-22 11:37 2026-06-17 Show GitHub Exploit DB Packet Storm
1000 4.3 警告
Network
Discourse Discourse Discourseにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-44779 2026-06-22 11:37 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259481 6.4 MEDIUM
Physics
lenovo flex_system_x240_m5_bios
flex_system_x280_x6_bios
flex_system_x480_x6_bios
flex_system_x880_bios
nextscale_nx360_m5_bios
system_x3250_m6_bios
system_x3500_m5_bios
system_x3550_m5…
Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with p… CWE-287
Improper Authentication
CVE-2017-3775 2024-11-21 12:26 2018-05-5 Show GitHub Exploit DB Packet Storm
259482 7.5 HIGH
Network
vmware xenon VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient acces… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-4952 2024-11-21 12:26 2018-05-2 Show GitHub Exploit DB Packet Storm
259483 7.5 HIGH
Network
lenovo lenovo_help Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information. CWE-200
Information Exposure
CVE-2017-3776 2024-11-21 12:26 2018-04-19 Show GitHub Exploit DB Packet Storm
259484 9.8 CRITICAL
Network
lenovo integrated_management_module_2 A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than ver… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-3774 2024-11-21 12:26 2018-04-19 Show GitHub Exploit DB Packet Storm
259485 6.5 MEDIUM
Network
mcafee network_security_manager Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyp… CWE-326
Inadequate Encryption Strength
CVE-2017-3971 2024-11-21 12:26 2018-04-4 Show GitHub Exploit DB Packet Storm
259486 5.9 MEDIUM
Network
mcafee network_security_manager Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages via an inadequate impl… CWE-417
 Channel and Path Errors
CVE-2017-3969 2024-11-21 12:26 2018-04-4 Show GitHub Exploit DB Packet Storm
259487 6.1 MEDIUM
Network
mcafee network_security_manager Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via applic… CWE-94
Code Injection
CVE-2017-3967 2024-11-21 12:26 2018-04-4 Show GitHub Exploit DB Packet Storm
259488 6.3 MEDIUM
Network
mcafee network_security_manager Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers … CWE-613
 Insufficient Session Expiration
CVE-2017-3966 2024-11-21 12:26 2018-04-4 Show GitHub Exploit DB Packet Storm
259489 8.8 HIGH
Network
mcafee network_security_manager Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized… CWE-352
 Origin Validation Error
CVE-2017-3965 2024-11-21 12:26 2018-04-4 Show GitHub Exploit DB Packet Storm
259490 5.4 MEDIUM
Network
mcafee network_security_manager Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a UR… CWE-79
Cross-site Scripting
CVE-2017-3964 2024-11-21 12:26 2018-04-4 Show GitHub Exploit DB Packet Storm