Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
171 7.5 重要
Network 		VMware Spring HATEOAS VMwareのSpring HATEOASにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41007 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
172 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Microsoft Kinect の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41092 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
173 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows DNS クライアントの特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-41108 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
174 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41838 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
175 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-41844 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
176 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41845 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
177 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41846 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
178 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-41847 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
179 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-41848 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
180 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41852 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257871 6.4 MEDIUM
Physics 		huawei honor_6x_firmware Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. If a user has enabled the smart unlock function, an attacker can impersonat… NVD-CWE-noinfo
CVE-2017-2728 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257872 4.3 MEDIUM
Physics 		huawei p9_firmware Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365,… NVD-CWE-noinfo
CVE-2017-2727 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257873 8.4 HIGH
Local 		huawei p10_firmware
p10_plus_firmware 		Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root priv… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-2726 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257874 7.8 HIGH
Local 		huawei p10_firmware
p10_plus_firmware 		Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root priv… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-2725 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257875 8.4 HIGH
Local 		huawei p10_firmware
p10_plus_firmware 		Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root priv… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-2724 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257876 6.7 MEDIUM
Local 		huawei files The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system c… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2017-2723 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257877 5.3 MEDIUM
Network 		huawei fusionsphere_openstack FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increa… CWE-798
 Use of Hard-coded Credentials 		CVE-2017-2720 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257878 8.8 HIGH
Adjacent 		huawei fusionsphere_openstack FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnera… CWE-77
Command Injection 		CVE-2017-2719 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257879 8.8 HIGH
Network 		huawei dp300_firmware
te60_firmware
tp3106_firmware
viewpoint_9030_firmware
ecns210_td_firmware
espace_7950_firmware
espace_iad_firmware
espace_u1981_firmware 		DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100… CWE-20
 Improper Input Validation  		CVE-2017-2722 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm
257880 4.6 MEDIUM
Physics 		huawei berlin-l21_firmware
berlin-l21hn_firmware
berlin-l22_firmware
berlin-l22hn_firmware
berlin-l23_firmware
berlin-l24hn_firmware
frd-l02_firmware
frd-l04_firmware
frd-l09_firmwar… 		Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150C… CWE-287
Improper Authentication 		CVE-2017-2721 2024-11-21 12:24 2017-11-23 Show GitHub Exploit DB Packet Storm