Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1221 7.5 重要
Network
NLnet Labs Routinator NLnet LabsのRoutinatorにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-49234 2026-06-12 14:46 2026-06-8 Show GitHub Exploit DB Packet Storm
1222 7.5 重要
Network
NLnet Labs Routinator NLnet LabsのRoutinatorにおける例外的な状態の処理に関する脆弱性 CWE-755
例外的な状態における不適切な処理
CVE-2026-49235 2026-06-12 14:46 2026-06-8 Show GitHub Exploit DB Packet Storm
1223 5.5 警告
Local
NSA Ghidra NSAのGhidraにおける無限ループに関する脆弱性 CWE-835
無限ループ
CVE-2026-49495 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1224 6.1 警告
Local
NSA Ghidra NSAのGhidraにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-49496 2026-06-12 14:45 2026-06-10 Show GitHub Exploit DB Packet Storm
1225 3.3
Local
NSA Ghidra NSAのGhidraにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-49497 2026-06-12 14:45 2026-06-10 Show GitHub Exploit DB Packet Storm
1226 8.8 重要
Network
NSA Ghidra NSAのGhidraにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-49498 2026-06-12 14:45 2026-06-10 Show GitHub Exploit DB Packet Storm
1227 6.5 警告
Network
フォーティネット FortiPortal フォーティネットのFortiPortalにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-49938 2026-06-12 14:45 2026-06-9 Show GitHub Exploit DB Packet Storm
1228 7.8 重要
Local
レッドハット
X.Org Foundation
Red Hat Enterprise Linux
xwayland
X.Org X Server
レッドハット等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-50260 2026-06-12 14:45 2026-06-5 Show GitHub Exploit DB Packet Storm
1229 5.5 警告
Local
レッドハット
X.Org Foundation
Red Hat Enterprise Linux
xwayland
X.Org X Server
レッドハット等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-50263 2026-06-12 14:45 2026-06-5 Show GitHub Exploit DB Packet Storm
1230 7.8 重要
Local
NSA Ghidra NSAのGhidraにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-52750 2026-06-12 14:45 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258741 5.5 MEDIUM
Local
huawei softco_firmware
espace_u1910_firmware
espace_u1911_firmware
espace_u1930_firmware
espace_u1960_firmware
espace_u1980_firmware
espace_u1981_firmware
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V20… CWE-400
 Uncontrolled Resource Consumption
CVE-2017-2690 2024-11-21 12:23 2017-11-23 Show GitHub Exploit DB Packet Storm
258742 7.5 HIGH
Network
inpsyde backwpup Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download. CWE-552
 Files or Directories Accessible to External Parties
CVE-2017-2551 2024-11-21 12:23 2017-09-28 Show GitHub Exploit DB Packet Storm
258743 7.5 HIGH
Network
puppet puppetlabs-apache Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca` parameter but do not specify the `ssl_certs_di… CWE-295
Improper Certificate Validation 
CVE-2017-2299 2024-11-21 12:23 2017-09-16 Show GitHub Exploit DB Packet Storm
258744 7.5 HIGH
Network
kubik-rubik easy_joomla_backup Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily guessable filename. CWE-200
Information Exposure
CVE-2017-2550 2024-11-21 12:23 2017-09-9 Show GitHub Exploit DB Packet Storm
258745 4.3 MEDIUM
Network
cybozu garoon Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications". CWE-22
Path Traversal
CVE-2017-2258 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258746 6.1 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function. CWE-79
Cross-site Scripting
CVE-2017-2257 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258747 5.4 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo". CWE-79
Cross-site Scripting
CVE-2017-2256 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258748 5.4 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space". CWE-79
Cross-site Scripting
CVE-2017-2255 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258749 4.9 MEDIUM
Network
cybozu garoon Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input CWE-20
 Improper Input Validation 
CVE-2017-2254 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258750 7.8 HIGH
Local
ntt flets_setsuzoku_tool Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path
CVE-2017-2242 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm