Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
141 5.3 警告
Network
Discourse Discourse Discourseにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい
CVE-2026-47264 2026-06-22 11:49 2026-06-12 Show GitHub Exploit DB Packet Storm
142 7 重要
Local
マイクロソフト Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft 365 Apps
Microsoft Office
Microsoft Office 2024 Long-Term…
Microsoft Office クイック実行の特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-47293 2026-06-22 11:49 2026-06-9 Show GitHub Exploit DB Packet Storm
143 6.5 警告
Network
Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい
CVE-2026-47340 2026-06-22 11:49 2026-06-17 Show GitHub Exploit DB Packet Storm
144 9.8 緊急
Network
マイクロソフト Azure Stack Edge Azure Stack Edge のリモートでコードが実行される脆弱性 New CWE-610
CWE-73
CVE-2026-47643 2026-06-22 11:49 2026-06-9 Show GitHub Exploit DB Packet Storm
145 6.5 警告
Network
マイクロソフト Microsoft Graph Microsoft Graph の情報漏えいの脆弱性 New CWE-200
CWE-noinfo
CVE-2026-47655 2026-06-22 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
146 7.5 重要
Network
VMware Spring AI VMwareのSpring AIにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 New CWE-943
データクエリロジックの特殊要素の不適切な中立化
CVE-2026-47835 2026-06-22 11:49 2026-06-15 Show GitHub Exploit DB Packet Storm
147 8.1 重要
Network
VMware Spring Security VMwareのSpring Securityにおける認証に関する脆弱性 New CWE-287
不適切な認証
CVE-2026-47838 2026-06-22 11:49 2026-06-10 Show GitHub Exploit DB Packet Storm
148 7.8 重要
Local
アドビシステムズ Adobe Acrobat Reader DC
Adobe Acrobat
Adobe Acrobat DC
アドビのAdobe Acrobat等の複数製品における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-47965 2026-06-22 11:49 2026-06-12 Show GitHub Exploit DB Packet Storm
149 8.2 重要
Network
アドビシステムズ Adobe Acrobat アドビのAdobe Acrobatにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-48294 2026-06-22 11:49 2026-06-17 Show GitHub Exploit DB Packet Storm
150 9.3 緊急
Network
Rocket.Chat Rocket.Chat Rocket.Chatにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御
CVE-2026-48616 2026-06-22 11:49 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257251 7.8 HIGH
Local
rapid7 insight_collector Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working dir… CWE-426
 Untrusted Search Path
CVE-2017-5234 2024-11-21 12:27 2017-03-3 Show GitHub Exploit DB Packet Storm
257252 7.8 HIGH
Local
rapid7 appspider_pro Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working direc… CWE-426
 Untrusted Search Path
CVE-2017-5233 2024-11-21 12:27 2017-03-3 Show GitHub Exploit DB Packet Storm
257253 7.8 HIGH
Local
rapid7 nexpose All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current worki… CWE-426
 Untrusted Search Path
CVE-2017-5232 2024-11-21 12:27 2017-03-3 Show GitHub Exploit DB Packet Storm
257254 7.1 HIGH
Network
rapid7 metasploit All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specia… CWE-22
Path Traversal
CVE-2017-5231 2024-11-21 12:27 2017-03-3 Show GitHub Exploit DB Packet Storm
257255 7.2 HIGH
Network
rapid7 nexpose The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides sto… CWE-798
 Use of Hard-coded Credentials
CVE-2017-5230 2024-11-21 12:27 2017-03-3 Show GitHub Exploit DB Packet Storm
257256 7.1 HIGH
Network
rapid7 metasploit All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafte… CWE-22
Path Traversal
CVE-2017-5229 2024-11-21 12:27 2017-03-3 Show GitHub Exploit DB Packet Storm
257257 7.1 HIGH
Network
rapid7 metasploit All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. By using a specially-crafted build … CWE-22
Path Traversal
CVE-2017-5228 2024-11-21 12:27 2017-03-3 Show GitHub Exploit DB Packet Storm
257258 5.5 MEDIUM
Local
jasper_project jasper The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image. CWE-125
Out-of-bounds Read
CVE-2017-5504 2024-11-21 12:27 2017-03-2 Show GitHub Exploit DB Packet Storm
257259 5.5 MEDIUM
Local
jasper_project jasper The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impac… CWE-787
 Out-of-bounds Write
CVE-2017-5503 2024-11-21 12:27 2017-03-2 Show GitHub Exploit DB Packet Storm
257260 5.5 MEDIUM
Local
jasper_project jasper libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. NVD-CWE-noinfo
CVE-2017-5502 2024-11-21 12:27 2017-03-2 Show GitHub Exploit DB Packet Storm