Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188791 8.8 重要
Network
TIBCO Software - tibbr Community および tibbr Enterprise における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-5534 2018-01-17 16:16 2017-12-12 Show GitHub Exploit DB Packet Storm
188792 5.5 警告
Local
アップル - 複数の Apple 製品のカーネルコンポーネントにおけるメモリ読み取りの制限を回避される脆弱性 CWE-704
不正な型変換またはキャスト
CVE-2017-13855 2018-01-17 14:51 2017-12-2 Show GitHub Exploit DB Packet Storm
188793 7.8 重要
Local
アップル - 複数の Apple 製品の IOKit コンポーネントにおける特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2017-7162 2018-01-17 14:51 2017-12-2 Show GitHub Exploit DB Packet Storm
188794 5.3 警告
Adjacent
ソニー株式会社 - 複数のソニー製ビデオ会議システムにおける認証不備の脆弱性 CWE-287
不適切な認証
CVE-2016-7830 2018-01-17 14:02 2016-12-15 Show GitHub Exploit DB Packet Storm
188795 6.3 警告
Network
Eric Teubert - WordPress 用プラグイン Multi Feed Reader における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-2195 2018-01-17 13:57 2017-06-6 Show GitHub Exploit DB Packet Storm
188796 7.8 重要
Local
法務省 - 商業登記電子認証ソフトのインストーラにおける DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2017-2177 2018-01-17 13:57 2017-05-26 Show GitHub Exploit DB Packet Storm
188797 7.8 重要
Local
防衛装備庁 - 防衛装備庁が提供する電子入札・開札システムのインストーラにおける DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2017-2178 2018-01-17 13:57 2017-05-25 Show GitHub Exploit DB Packet Storm
188798 7.8 重要
Local
日本年金機構 - 日本年金機構製の複数のインストーラにおける DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2016-7818 2018-01-17 13:52 2016-12-1 Show GitHub Exploit DB Packet Storm
188799 5.3 警告
Network
日本エイサー - Acer Portal app for Android における SSL サーバ証明書の検証不備の脆弱性 CWE-295
不正な証明書検証
CVE-2016-5648 2018-01-17 13:48 2016-07-5 Show GitHub Exploit DB Packet Storm
188800 7.8 重要
Local
環境省 - 環境省が提供する報告書作成支援ツールのインストーラにおける任意のDLL読み込みの脆弱性 CWE-Other
その他
CVE-2017-2209 2018-01-17 13:48 2017-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 - - - Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution.  This project i… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-5482 2026-06-17 00:41 2026-06-15 Show GitHub Exploit DB Packet Storm
162 8.8 HIGH
Network
- - Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resultin… New CWE-78
OS Command 
CVE-2026-5416 2026-06-17 00:41 2026-06-16 Show GitHub Exploit DB Packet Storm
163 - - - A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and a… New CWE-122
Heap-based Buffer Overflow
CVE-2026-8484 2026-06-17 00:41 2026-06-16 Show GitHub Exploit DB Packet Storm
164 8.8 HIGH
Network
- - Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state w… Update CWE-787
 Out-of-bounds Write
CVE-2026-34195 2026-06-17 00:40 2026-06-13 Show GitHub Exploit DB Packet Storm
165 5.5 MEDIUM
Local
- - An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disr… Update CWE-653
 Improper Isolation or Compartmentalization
CVE-2026-41155 2026-06-17 00:40 2026-06-13 Show GitHub Exploit DB Packet Storm
166 9.8 CRITICAL
Network
- - A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible b… Update CWE-787
 Out-of-bounds Write
CVE-2026-41157 2026-06-17 00:40 2026-06-13 Show GitHub Exploit DB Packet Storm
167 7.8 HIGH
Local
- - Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the deferred free mechanis… Update CWE-416
 Use After Free
CVE-2026-41158 2026-06-17 00:40 2026-06-13 Show GitHub Exploit DB Packet Storm
168 7.8 HIGH
Local
- - Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to… New CWE-427
 Uncontrolled Search Path Element
CVE-2026-50100 2026-06-17 00:40 2026-06-15 Show GitHub Exploit DB Packet Storm
169 6.7 MEDIUM
Local
- - Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges. New CWE-276
Incorrect Default Permissions 
CVE-2026-50255 2026-06-17 00:40 2026-06-16 Show GitHub Exploit DB Packet Storm
170 9.8 CRITICAL
Network
- - Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmware image. Once this salt is recovered from any device, an attacker can generate … Update CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-28742 2026-06-17 00:37 2026-06-13 Show GitHub Exploit DB Packet Storm