Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1411 9.1 緊急
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2026-34182 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1412 7.5 重要
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける不適切に制御された順次メモリ割り当てに関する脆弱性 CWE-1325
不適切に制御された順次メモリ割り当て 		CVE-2026-34183 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1413 5.5 警告
Local 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-34657 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1414 7.5 重要
Network 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-34711 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1415 7.5 重要
Network 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-34712 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1416 7.5 重要
Network 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34713 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1417 5 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2026-35188 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1418 5.4 警告
Network 		VMware VMware Telco Cloud Platform
VMware Aria Operations
VMware Cloud Foundation 		VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41724 2026-06-16 13:38 2026-06-8 Show GitHub Exploit DB Packet Storm
1419 5.3 警告
Network 		VMware Spring Framework VMwareのSpring FrameworkにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-41853 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1420 6.5 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41854 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257411 6.6 MEDIUM
Local 		schneider-electric wonderware_historian_client An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser (with improper restriction of XM… CWE-611
XXE 		CVE-2017-7907 2024-11-21 12:32 2017-05-19 Show GitHub Exploit DB Packet Storm
257412 9.8 CRITICAL
Network 		redhat jboss_enterprise_application_platform It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read fil… CWE-611
XXE 		CVE-2017-7503 2024-11-21 12:32 2017-05-19 Show GitHub Exploit DB Packet Storm
257413 7.8 HIGH
Local 		qemu
debian 		qemu
debian_linux 		Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs meta… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-7493 2024-11-21 12:32 2017-05-18 Show GitHub Exploit DB Packet Storm
257414 4.3 MEDIUM
Network 		authconfig_project authconfig Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames. CWE-200
Information Exposure 		CVE-2017-7488 2024-11-21 12:32 2017-05-17 Show GitHub Exploit DB Packet Storm
257415 8.8 HIGH
Network 		apache cxf_fediz Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross … CWE-352
 Origin Validation Error 		CVE-2017-7662 2024-11-21 12:32 2017-05-17 Show GitHub Exploit DB Packet Storm
257416 8.8 HIGH
Network 		apache cxf_fediz Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, S… CWE-352
 Origin Validation Error 		CVE-2017-7661 2024-11-21 12:32 2017-05-17 Show GitHub Exploit DB Packet Storm
257417 5.5 MEDIUM
Local 		linux linux_kernel fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-before-commit list, which allows local users to obtain sensitive information from ot… CWE-200
Information Exposure 		CVE-2017-7495 2024-11-21 12:32 2017-05-16 Show GitHub Exploit DB Packet Storm
257418 4.3 MEDIUM
Network 		moodle moodle In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting. CWE-352
 Origin Validation Error 		CVE-2017-7491 2024-11-21 12:32 2017-05-15 Show GitHub Exploit DB Packet Storm
257419 5.3 MEDIUM
Network 		moodle moodle In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2017-7490 2024-11-21 12:32 2017-05-15 Show GitHub Exploit DB Packet Storm
257420 6.3 MEDIUM
Network 		moodle moodle In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link. CWE-269
 Improper Privilege Management 		CVE-2017-7489 2024-11-21 12:32 2017-05-15 Show GitHub Exploit DB Packet Storm