Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
151 5.3 警告
Network 		OpenFGA OpenFGA
Helm Charts 		OpenFGAのHelm Charts等の複数製品における複数の脆弱性 New CWE-345
CWE-668
CVE-2026-48096 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
152 7.8 重要
Local 		アドビシステムズ Adobe InDesign アドビのAdobe InDesignにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-48293 2026-06-12 14:46 2026-06-9 Show GitHub Exploit DB Packet Storm
153 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Sampler アドビのAdobe Substance 3D Samplerにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-48305 2026-06-12 14:46 2026-06-9 Show GitHub Exploit DB Packet Storm
154 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Sampler アドビのAdobe Substance 3D Samplerにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-48306 2026-06-12 14:46 2026-06-9 Show GitHub Exploit DB Packet Storm
155 5.5 警告
Local 		ImageMagick ImageMagick ImageMagickにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-48724 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
156 4.7 警告
Local 		ImageMagick ImageMagick ImageMagickにおける無限ループに関する脆弱性 New CWE-835
無限ループ 		CVE-2026-48733 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
157 5.5 警告
Local 		ImageMagick ImageMagick ImageMagickにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-48734 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
158 5.9 警告
Network 		ImageMagick ImageMagick ImageMagickにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-48994 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
159 7.5 重要
Network 		ImageMagick ImageMagick ImageMagickにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-49218 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
160 5.5 警告
Local 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 New CWE-200
CWE-22
CWE-78
CWE-863
CVE-2026-49219 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258121 7.8 HIGH
Local 		charamin omp Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an u… CWE-426
 Untrusted Search Path 		CVE-2017-2227 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258122 7.8 HIGH
Local 		nta e-tax Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspe… CWE-426
 Untrusted Search Path 		CVE-2017-2226 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258123 9.8 CRITICAL
Network 		mext ebidsettingchecker Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path 		CVE-2017-2225 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258124 6.1 MEDIUM
Network 		web-dorado event_calendar_wd Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2017-2224 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258125 8.8 HIGH
Network 		iodata ts-wptcam_camera_firmware
ts-ptcam_camera_firmware
ts-ptcam\/poe_camera_firmware
ts-wlc2_camera_firmware
ts-wlce_camera_firmware
ts-wrlc_camera_firmware
ts-wptcam2_firmware 		Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allo… CWE-352
 Origin Validation Error 		CVE-2017-2223 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258126 6.1 MEDIUM
Network 		butlerblog wp-members Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2017-2222 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258127 7.8 HIGH
Local 		ipa casl_ii_simulator Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path 		CVE-2017-2220 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258128 7.8 HIGH
Local 		apple quicktime Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path 		CVE-2017-2218 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258129 6.1 MEDIUM
Network 		wpdownloadmanager wordpress_download_manager Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. CWE-601
Open Redirect 		CVE-2017-2217 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm
258130 6.1 MEDIUM
Network 		wpdownloadmanager wordpress_download_manager Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2017-2216 2024-11-21 12:23 2017-07-7 Show GitHub Exploit DB Packet Storm