Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
141 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-46059 2026-06-17 15:39 2026-05-27 Show GitHub Exploit DB Packet Storm
142 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-46060 2026-06-17 15:39 2026-05-27 Show GitHub Exploit DB Packet Storm
143 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 New CWE-667
不適切なロック
CVE-2026-46061 2026-06-17 15:39 2026-05-27 Show GitHub Exploit DB Packet Storm
144 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-46062 2026-06-17 15:39 2026-05-27 Show GitHub Exploit DB Packet Storm
145 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 New CWE-667
不適切なロック
CVE-2026-46063 2026-06-17 15:39 2026-05-27 Show GitHub Exploit DB Packet Storm
146 6.1 警告
Network
diagrams drawio diagramsのdrawioにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-46642 2026-06-17 15:39 2026-06-10 Show GitHub Exploit DB Packet Storm
147 7.2 重要
Network
MariaDB Corporation Ab. MariaDB MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-48163 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
148 7.2 重要
Network
MariaDB Corporation Ab. MariaDB MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-48165 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
149 7.8 重要
Local
レッドハット
X.Org Foundation
X.Org X Server
Red Hat Enterprise Linux
xwayland
レッドハット等の複数ベンダの製品における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-50264 2026-06-17 15:39 2026-06-5 Show GitHub Exploit DB Packet Storm
150 7.5 重要
Network
Express.js Multer Express.jsのMulterにおける不完全なクリーンアップに関する脆弱性 New CWE-459
不完全なクリーンアップ
CVE-2026-5038 2026-06-17 15:39 2026-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257751 6.4 MEDIUM
Physics
denx u-boot Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption (i.e., sett… CWE-310
Cryptographic Issues
CVE-2017-3226 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
257752 4.6 MEDIUM
Physics
denx u-boot Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may … CWE-310
Cryptographic Issues
CVE-2017-3225 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
257753 8.2 HIGH
Adjacent
quagga
suse
redhat
quagga
opensuse
suse_linux
package_manager
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two i… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2017-3224 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
257754 9.8 CRITICAL
Network
dahuasecurity ip_camera_firmware Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera pro… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-3223 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
257755 8.1 HIGH
Network
calamp lmu_3030_obd-ii_firmware
lmu_3030_cdma_firmware
lmu_3030_gsm_firmware
CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured for this interface by the integrator / reseller. This inter… CWE-306
Missing Authentication for Critical Function
CVE-2017-3217 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
257756 7.8 HIGH
Local
portrait
fujitsu
hp
philips
portrait_display_sdk
displayview_click
displayview_click_suite
display_assistant
my_display
smart_control_premium
Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using th… CWE-16
Configuration
CVE-2017-3210 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
257757 8.1 HIGH
Adjacent
dbpower u818a_firmware The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FT… CWE-306
CWE-276
Missing Authentication for Critical Function
Incorrect Default Permissions 
CVE-2017-3209 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
257758 9.8 CRITICAL
Network
gigabyte gb-bsi7h-6500_firmware
gb-bxi7-5775_firmware
GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary m… CWE-347
CWE-311
 Improper Verification of Cryptographic Signature
Missing Encryption of Sensitive Data
CVE-2017-3198 2024-11-21 12:25 2018-07-10 Show GitHub Exploit DB Packet Storm
257759 9.8 CRITICAL
Network
gigabyte gb-bsi7h-6500_firmware
gb-bxi7-5775_firmware
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not… CWE-20
 Improper Input Validation 
CVE-2017-3197 2024-11-21 12:25 2018-07-10 Show GitHub Exploit DB Packet Storm
257760 9.8 CRITICAL
Network
themidnightcoders weborb_for_java The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. I… CWE-611
XXE
CVE-2017-3208 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm