Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1341 5.5 警告
Network 		Devolutions Devolutions Remote Desktop Manager DevolutionsのDevolutions Remote Desktop Managerにおけるホストの不一致による証明書の検証に関する脆弱性 CWE-297
ホストの不一致による証明書の不適切な検証 		CVE-2026-12162 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1342 8.8 重要
Network 		D-Link Corporation DCS-935L ファームウェア D-Link CorporationのDCS-935L ファームウェアにおける複数の脆弱性 CWE-119
CWE-134
CVE-2026-12174 2026-06-17 15:35 2026-06-13 Show GitHub Exploit DB Packet Storm
1343 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-12289 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1344 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-12298 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1345 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-12299 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1346 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-12303 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1347 4.7 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-200
CWE-688
CVE-2026-12311 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1348 4.7 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-12313 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1349 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-12319 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
1350 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-12320 2026-06-17 15:34 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257351 8.2 HIGH
Network 		apache openmeetings Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted areas. NVD-CWE-noinfo
CVE-2017-7682 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
257352 8.8 HIGH
Network 		apache openmeetings Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the appli… CWE-89
SQL Injection 		CVE-2017-7681 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
257353 7.5 HIGH
Network 		apache openmeetings Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains. NVD-CWE-noinfo
CVE-2017-7680 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
257354 9.8 CRITICAL
Network 		apache openmeetings Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection. CWE-326
CWE-307
Inadequate Encryption Strength
mproper Restriction of Excessive Authentication Attempts 		CVE-2017-7673 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
257355 8.8 HIGH
Network 		apache openmeetings Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks. CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2017-7666 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
257356 10.0 CRITICAL
Network 		apache openmeetings Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. CWE-611
XXE 		CVE-2017-7664 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
257357 6.1 MEDIUM
Network 		apache openmeetings Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0. CWE-79
Cross-site Scripting 		CVE-2017-7663 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
257358 5.9 MEDIUM
Network 		apache struts If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validati… CWE-20
 Improper Input Validation  		CVE-2017-7672 2024-11-21 12:32 2017-07-14 Show GitHub Exploit DB Packet Storm
257359 7.5 HIGH
Network 		f5
puppet
apple 		nginx
puppet_enterprise
xcode 		Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered … - CVE-2017-7529 2024-11-21 12:32 2017-07-13 Show GitHub Exploit DB Packet Storm
257360 6.1 MEDIUM
Network 		apache spark In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits dat… CWE-79
Cross-site Scripting 		CVE-2017-7678 2024-11-21 12:32 2017-07-12 Show GitHub Exploit DB Packet Storm