Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189291 7.8 重要
Local
Debian
Apache Software Foundation
- Apache OpenOffice における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-12608 2017-12-14 14:55 2017-11-7 Show GitHub Exploit DB Packet Storm
189292 7.8 重要
Local
Debian
Apache Software Foundation
- Apache OpenOffice における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-12607 2017-12-14 14:55 2017-11-7 Show GitHub Exploit DB Packet Storm
189293 6.5 警告
Network
Huawei - 複数の Huawei 製品におけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証
CVE-2017-8201 2017-12-14 14:25 2017-09-27 Show GitHub Exploit DB Packet Storm
189294 6.5 警告
Network
Huawei - 複数の Huawei 製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-8200 2017-12-14 14:25 2017-09-27 Show GitHub Exploit DB Packet Storm
189295 6.5 警告
Network
Huawei - 複数の Huawei 製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-8199 2017-12-14 14:25 2017-09-27 Show GitHub Exploit DB Packet Storm
189296 9.8 緊急
Network
Confire project - Confire におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2017-16763 2017-12-14 14:23 2017-11-12 Show GitHub Exploit DB Packet Storm
189297 7.8 重要
Local
AutomationDirect - 複数の AutomationDirect 製品における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2017-14020 2017-12-14 14:09 2017-11-9 Show GitHub Exploit DB Packet Storm
189298 5.4 警告
Network
TIBCO Software - 複数の TIBCO JasperReports および Jaspersoft 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5532 2017-12-14 12:19 2017-11-15 Show GitHub Exploit DB Packet Storm
189299 9.8 緊急
Network
TIBCO Software - 複数の TIBCO JasperReports および Jaspersoft 製品におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-5533 2017-12-14 12:19 2017-11-15 Show GitHub Exploit DB Packet Storm
189300 4.3 警告
Physics
SanDisk - SanDisk Secure Access における暗号に関する脆弱性 CWE-310
暗号の問題
CVE-2017-16560 2017-12-14 12:12 2017-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 8.7 HIGH
Network
gitlab gitlab GitLab has remediated an issue in GitLab EE affecting all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authentic… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-6552 2026-06-12 02:36 2026-06-11 Show GitHub Exploit DB Packet Storm
482 4.6 MEDIUM
Adjacent
espressif esp-idf ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0, an out-of-bounds read exists in the BlueDroid AVRCP vendor-command parser (av… New CWE-125
Out-of-bounds Read
CVE-2026-46532 2026-06-12 02:36 2026-06-10 Show GitHub Exploit DB Packet Storm
483 9.8 CRITICAL
Network
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network. Update CWE-121
Stack-based Buffer Overflow
CVE-2026-44815 2026-06-12 02:35 2026-06-10 Show GitHub Exploit DB Packet Storm
484 3.7 LOW
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authen… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-6976 2026-06-12 02:34 2026-06-11 Show GitHub Exploit DB Packet Storm
485 7.5 HIGH
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unaut… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-7250 2026-06-12 02:34 2026-06-11 Show GitHub Exploit DB Packet Storm
486 4.3 MEDIUM
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could have allowed an unaut… New CWE-153
 Improper Neutralization of Substitution Characters
CVE-2026-9694 2026-06-12 02:32 2026-06-11 Show GitHub Exploit DB Packet Storm
487 6.1 MEDIUM
Network
adobe experience_manager Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scr… Update CWE-79
Cross-site Scripting
CVE-2026-34691 2026-06-12 02:29 2026-06-10 Show GitHub Exploit DB Packet Storm
488 6.5 MEDIUM
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authe… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-9204 2026-06-12 02:28 2026-06-11 Show GitHub Exploit DB Packet Storm
489 8.7 HIGH
Network
gitlab gitlab GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authent… New CWE-79
Cross-site Scripting
CVE-2026-8589 2026-06-12 02:28 2026-06-11 Show GitHub Exploit DB Packet Storm
490 4.7 MEDIUM
Network
adobe experience_manager Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject … Update CWE-79
Cross-site Scripting
CVE-2026-34693 2026-06-12 02:22 2026-06-10 Show GitHub Exploit DB Packet Storm