Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1401 7.3 重要
Local 		マイクロソフト Microsoft .NET Framework
.NET 		.NET の特権の昇格の脆弱性 CWE-190
CWE-20
CWE-noinfo
CVE-2026-35433 2026-06-22 11:38 2026-05-12 Show GitHub Exploit DB Packet Storm
1402 7.1 重要
Local 		Linux Foundation Kedro Linux FoundationのKedroにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-3840 2026-06-22 11:38 2026-06-12 Show GitHub Exploit DB Packet Storm
1403 8.8 重要
Network 		マイクロソフト SQL Server 2016
SQL Server 2019
SQL Server 2025
SQL Server 2022
SQL Server 2017 		SQL Server のリモート コードが実行される脆弱性 CWE-610
CWE-73
CVE-2026-40370 2026-06-22 11:38 2026-05-12 Show GitHub Exploit DB Packet Storm
1404 8.8 重要
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 (オンプレミス) の特権昇格の脆弱性 CWE-280
CWE-755
CVE-2026-40371 2026-06-22 11:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1405 7.2 重要
Network 		VMware Spring Security VMwareのSpring Securityにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40993 2026-06-22 11:38 2026-06-10 Show GitHub Exploit DB Packet Storm
1406 8.4 重要
Network 		マイクロソフト Azure Stack Edge Azure Stack Edge のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41098 2026-06-22 11:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1407 5.3 警告
Network 		opentelemetry opentelemetry opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-41178 2026-06-22 11:38 2026-06-4 Show GitHub Exploit DB Packet Storm
1408 4.9 警告
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41280 2026-06-22 11:38 2026-06-17 Show GitHub Exploit DB Packet Storm
1409 6.1 警告
Network 		VMware Spring Security VMwareのSpring Securityにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-41706 2026-06-22 11:37 2026-06-10 Show GitHub Exploit DB Packet Storm
1410 6.5 警告
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-42357 2026-06-22 11:37 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257311 5.5 MEDIUM
Local 		google android In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected. NVD-CWE-noinfo
CVE-2017-8235 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
257312 7.8 HIGH
Local 		google android In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. CWE-125
Out-of-bounds Read 		CVE-2017-8234 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
257313 7.8 HIGH
Local 		google android In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write. CWE-787
 Out-of-bounds Write 		CVE-2017-8233 2024-11-21 12:33 2017-06-14 Show GitHub Exploit DB Packet Storm
257314 7.8 HIGH
Local 		cisofy lynis Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file. CWE-59
Link Following 		CVE-2017-8108 2024-11-21 12:33 2017-06-9 Show GitHub Exploit DB Packet Storm
257315 8.8 HIGH
Network 		schneider-electric somachine A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability ex… CWE-427
 Uncontrolled Search Path Element 		CVE-2017-7966 2024-11-21 12:33 2017-06-8 Show GitHub Exploit DB Packet Storm
257316 7.3 HIGH
Local 		schneider-electric somachine_hvac A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-7965 2024-11-21 12:33 2017-06-8 Show GitHub Exploit DB Packet Storm
257317 6.7 MEDIUM
Local 		compulab intense_pc_firmware
mintbox_2_firmware 		CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a … CWE-862
 Missing Authorization 		CVE-2017-8083 2024-11-21 12:33 2017-06-6 Show GitHub Exploit DB Packet Storm
257318 8.8 HIGH
Network 		git
opensuse
debian
canonical
fedoraproject 		git-shell
leap
debian_linux
ubuntu_linux
fedora 		git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.… NVD-CWE-noinfo
CVE-2017-8386 2024-11-21 12:33 2017-06-2 Show GitHub Exploit DB Packet Storm
257319 6.5 MEDIUM
Network 		eucalyptus eucalyptus Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service (E2 service outage) via unspecified vectors. NVD-CWE-noinfo
CVE-2017-7999 2024-11-21 12:33 2017-06-2 Show GitHub Exploit DB Packet Storm
257320 8.8 HIGH
Network 		pivotx pivotx PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file. CWE-94
Code Injection 		CVE-2017-8402 2024-11-21 12:33 2017-05-31 Show GitHub Exploit DB Packet Storm