Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1691 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows DNS クライアントの特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-41108 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1692 7.5 重要
Network
VMware Spring Framework VMwareのSpring Frameworkにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用
CVE-2026-41838 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1693 6.1 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-41844 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1694 6.1 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-41845 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1695 6.1 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-41846 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1696 5.3 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-41847 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1697 7.5 重要
Network
VMware Spring Framework VMwareのSpring Frameworkにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ
CVE-2026-41848 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1698 5.3 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41852 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
1699 5.1 警告
Local
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-191
CVE-2026-42326 2026-06-12 14:53 2026-06-10 Show GitHub Exploit DB Packet Storm
1700 7.5 重要
Network
Svelte project Svelte Svelte projectのSvelteにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ
CVE-2026-42567 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258561 6.7 MEDIUM
Local
f5 big-iq_centralized_management A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account passwo… CWE-269
 Improper Privilege Management
CVE-2017-6152 2024-11-21 12:29 2018-03-8 Show GitHub Exploit DB Packet Storm
258562 7.0 HIGH
Local
nvidia
google
shield_tv_firmware
android
NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate. CWE-362
Race Condition
CVE-2017-6296 2024-11-21 12:29 2018-03-7 Show GitHub Exploit DB Packet Storm
258563 8.4 HIGH
Local
nvidia
google
shield_tv_firmware
android
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial … CWE-125
Out-of-bounds Read
CVE-2017-6295 2024-11-21 12:29 2018-03-7 Show GitHub Exploit DB Packet Storm
258564 5.5 MEDIUM
Local
nvidia
google
shield_tv_firmware
android
NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened enc… CWE-200
CWE-326
Information Exposure
Inadequate Encryption Strength
CVE-2017-6284 2024-11-21 12:29 2018-03-7 Show GitHub Exploit DB Packet Storm
258565 5.5 MEDIUM
Local
nvidia
google
shield_tv_firmware
android
NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is r… CWE-200
Information Exposure
CVE-2017-6283 2024-11-21 12:29 2018-03-7 Show GitHub Exploit DB Packet Storm
258566 7.8 HIGH
Local
nvidia
google
shield_tv_firmware
android
NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This… CWE-123
 Write-what-where Condition
CVE-2017-6282 2024-11-21 12:29 2018-03-7 Show GitHub Exploit DB Packet Storm
258567 7.5 HIGH
Network
google android NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980. CWE-200
CWE-125
Information Exposure
Out-of-bounds Read
CVE-2017-6280 2024-11-21 12:29 2018-03-7 Show GitHub Exploit DB Packet Storm
258568 7.5 HIGH
Network
f5 big-ip_application_security_manager On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems… CWE-20
 Improper Input Validation 
CVE-2017-6154 2024-11-21 12:29 2018-03-2 Show GitHub Exploit DB Packet Storm
258569 7.5 HIGH
Network
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packet… CWE-20
 Improper Input Validation 
CVE-2017-6150 2024-11-21 12:29 2018-03-2 Show GitHub Exploit DB Packet Storm
258570 5.5 MEDIUM
Local
apng_disassembler_project apng_disassembler Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted image containing a malformed image size descriptor in… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-6193 2024-11-21 12:29 2018-02-21 Show GitHub Exploit DB Packet Storm