Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189181 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5088 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189182 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5087 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189183 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5086 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189184 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5085 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189185 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5084 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189186 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5083 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189187 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5082 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189188 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5081 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189189 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5080 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
189190 7.8 重要
Local 		K7 Computing - K7 Antivirus における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-5079 2018-01-26 16:13 2018-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1411 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. CWE-59
Link Following 		CVE-2026-42989 2026-06-12 00:45 2026-06-10 Show GitHub Exploit DB Packet Storm
1412 7.8 HIGH
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2025 		Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-42991 2026-06-12 00:43 2026-06-10 Show GitHub Exploit DB Packet Storm
1413 5.3 MEDIUM
Network 		vmware spring_framework A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker t… CWE-863
 Incorrect Authorization 		CVE-2026-41852 2026-06-12 00:43 2026-06-9 Show GitHub Exploit DB Packet Storm
1414 8.4 HIGH
Local 		microsoft 365_apps
microsoft_365
office_2019
office_2021
office_2024
sharepoint_server
word 		Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. CWE-416
 Use After Free 		CVE-2026-45458 2026-06-12 00:37 2026-06-10 Show GitHub Exploit DB Packet Storm
1415 - - - Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges,… CWE-345
CWE-1240
 Insufficient Verification of Data Authenticity
 Use of a Cryptographic Primitive with a Risky Implementation 		CVE-2026-46654 2026-06-12 00:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1416 - - - Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endpoint with a ?filter= query string of a few thousand nested parentheses (≈ 4–12 … CWE-248
CWE-400
CWE-674
 Uncaught Exception
 Uncontrolled Resource Consumption
 Uncontrolled Recursion 		CVE-2026-46689 2026-06-12 00:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1417 5.4 MEDIUM
Network 		apache answer Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in … CWE-80
CWE-79
Basic XSS
Cross-site Scripting 		CVE-2026-34033 2026-06-12 00:35 2026-06-9 Show GitHub Exploit DB Packet Storm
1418 - - - SpiceDB is an open source database system for creating and managing security-critical application permissions. From version 1.15.0 to before version 1.52.0, caveat structures with nested lists can re… CWE-285
Improper Authorization 		CVE-2026-46668 2026-06-12 00:35 2026-06-11 Show GitHub Exploit DB Packet Storm
1419 - - - Allocation of Resources Without Limits or Throttling vulnerability in membraneframework membrane_mp4_plugin allows unauthenticated denial-of-service via BEAM atom table exhaustion. The MP4 box heade… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-53423 2026-06-12 00:35 2026-06-11 Show GitHub Exploit DB Packet Storm
1420 7.0 HIGH
Local 		microsoft windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2022
windows_server_2025 		Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-45487 2026-06-12 00:35 2026-06-10 Show GitHub Exploit DB Packet Storm