Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
131 5.5 警告
Local
マイクロソフト Visual Studio Code Visual Studio Code セキュリティ機能のバイパスの脆弱性 New CWE-20
CWE-23
CWE-noinfo
CVE-2026-48569 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
132 7.8 重要
Local
マイクロソフト Microsoft PC Manager Microsoft PC マネージャーのセキュリティ機能バイパスの脆弱性 New CWE-284
不適切なアクセス制御
CVE-2026-49161 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
133 8.8 重要
Network
Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション
CVE-2026-50223 2026-06-15 11:15 2026-06-10 Show GitHub Exploit DB Packet Storm
134 6.5 警告
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける認証に関する脆弱性 New CWE-287
CWE-noinfo
CVE-2026-50623 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
135 5.3 警告
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるCRLF インジェクションの脆弱性 New CWE-93
CRLF インジェクション
CVE-2026-50629 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
136 6.5 警告
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるHTTP レスポンス分割に関する脆弱性 New CWE-113
HTTP レスポンスの分割
CVE-2026-50630 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
137 7.4 重要
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 New CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態
CVE-2026-50631 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
138 8.1 重要
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-50632 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
139 8.1 重要
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-50633 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
140 6.5 警告
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるデジタル署名の検証に関する脆弱性 New CWE-347
デジタル署名の不適切な検証
CVE-2026-50634 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257931 6.1 MEDIUM
Network
fortinet fortios A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation. CWE-79
Cross-site Scripting
CVE-2017-3127 2024-11-21 12:24 2017-06-1 Show GitHub Exploit DB Packet Storm
257932 7.2 HIGH
Network
fortinet fortiwlc-sd An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'. CWE-20
 Improper Input Validation 
CVE-2017-3134 2024-11-21 12:24 2017-05-27 Show GitHub Exploit DB Packet Storm
257933 6.1 MEDIUM
Network
fortinet fortiweb A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb … CWE-79
Cross-site Scripting
CVE-2017-3129 2024-11-21 12:24 2017-05-27 Show GitHub Exploit DB Packet Storm
257934 6.1 MEDIUM
Network
fortinet fortianalyzer_firmware
fortimanager_firmware
An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter. CWE-601
Open Redirect
CVE-2017-3126 2024-11-21 12:24 2017-05-27 Show GitHub Exploit DB Packet Storm
257935 8.1 HIGH
Network
zabbix zabbix An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote co… CWE-78
OS Command 
CVE-2017-2824 2024-11-21 12:24 2017-05-24 Show GitHub Exploit DB Packet Storm
257936 7.8 HIGH
Local
poweriso poweriso A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can… CWE-416
 Use After Free
CVE-2017-2823 2024-11-21 12:24 2017-05-24 Show GitHub Exploit DB Packet Storm
257937 7.8 HIGH
Local
hancom thinkfree_office_neo
hangul_word_processor
An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-2819 2024-11-21 12:24 2017-05-24 Show GitHub Exploit DB Packet Storm
257938 7.8 HIGH
Local
poweriso poweriso A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can cause a vulnerability resulting in potential code ex… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-2817 2024-11-21 12:24 2017-05-24 Show GitHub Exploit DB Packet Storm
257939 9.8 CRITICAL
Network
botan_project botan A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially c… CWE-125
Out-of-bounds Read
CVE-2017-2801 2024-11-21 12:24 2017-05-24 Show GitHub Exploit DB Packet Storm
257940 9.8 CRITICAL
Network
wolfssl wolfssl A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and pos… CWE-295
Improper Certificate Validation 
CVE-2017-2800 2024-11-21 12:24 2017-05-24 Show GitHub Exploit DB Packet Storm