Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
190101 8.8 重要
Network
Jenkins プロジェクト - Jenkins Favorite プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-1000244 2017-11-21 11:39 2017-06-6 Show GitHub Exploit DB Packet Storm
190102 4.3 警告
Network
Jenkins プロジェクト - Jenkins Favorite プラグインにおけるパーミッションに関する脆弱性 CWE-275
パーミッションの問題
CVE-2017-1000243 2017-11-21 11:39 2017-06-6 Show GitHub Exploit DB Packet Storm
190103 3.3
Local
Jenkins プロジェクト - Jenkins Git Client プラグインにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-1000242 2017-11-21 11:39 2017-04-27 Show GitHub Exploit DB Packet Storm
190104 6.6 警告
Physics
Linux - Linux Kernel における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-16538 2017-11-21 10:33 2017-09-26 Show GitHub Exploit DB Packet Storm
190105 6.6 警告
Physics
Linux - Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-16537 2017-11-21 10:33 2017-10-9 Show GitHub Exploit DB Packet Storm
190106 9.8 緊急
Network
Sokial - Sokial Social Network Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-15973 2017-11-20 16:52 2017-09-29 Show GitHub Exploit DB Packet Storm
190107 9.8 緊急
Network
Adult Script Pro - Adult Script Pro における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-15959 2017-11-20 16:44 2017-09-29 Show GitHub Exploit DB Packet Storm
190108 9.8 緊急
Network
softechproducts - SoftDatepro Dating Social Network における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-15972 2017-11-20 16:44 2017-09-29 Show GitHub Exploit DB Packet Storm
190109 6.6 警告
Physics
Linux - Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-16536 2017-11-20 16:34 2017-09-21 Show GitHub Exploit DB Packet Storm
190110 6.6 警告
Physics
Linux - Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-16535 2017-11-20 16:34 2017-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
871 5.4 MEDIUM
Network
buffalo open_xdmod OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attacker can inject malicious JavaScript into their Open XDMoD user profile and abus… CWE-79
Cross-site Scripting
CVE-2026-45778 2026-06-11 06:05 2026-06-6 Show GitHub Exploit DB Packet Storm
872 9.8 CRITICAL
Network
buffalo open_xdmod OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated remote attacker to… CWE-89
SQL Injection
CVE-2026-45779 2026-06-11 06:04 2026-06-6 Show GitHub Exploit DB Packet Storm
873 6.8 MEDIUM
Physics
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. CWE-284
NVD-CWE-noinfo
Improper Access Control
CVE-2026-45658 2026-06-11 05:59 2026-06-10 Show GitHub Exploit DB Packet Storm
874 - - - A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. CWE-502
 Deserialization of Untrusted Data
CVE-2026-44963 2026-06-11 05:58 2026-06-10 Show GitHub Exploit DB Packet Storm
875 7.1 HIGH
Adjacent
microsoft windows_server_2012
windows_server_2016
windows_server_2019
windows_server_2022
windows_server_2025
Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. CWE-190
 Integer Overflow or Wraparound
CVE-2026-47288 2026-06-11 05:57 2026-06-10 Show GitHub Exploit DB Packet Storm
876 9.8 CRITICAL
Network
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network. CWE-122
CWE-190
Heap-based Buffer Overflow
 Integer Overflow or Wraparound
CVE-2026-47291 2026-06-11 05:54 2026-06-10 Show GitHub Exploit DB Packet Storm
877 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-74
CWE-79
Injection
Cross-site Scripting
CVE-2026-47634 2026-06-11 05:49 2026-06-10 Show GitHub Exploit DB Packet Storm
878 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting
CVE-2026-47636 2026-06-11 05:47 2026-06-10 Show GitHub Exploit DB Packet Storm
879 9.8 CRITICAL
Network
microsoft windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2022
windows_server_2025
Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network. CWE-122
CWE-416
Heap-based Buffer Overflow
 Use After Free
CVE-2026-45657 2026-06-11 05:44 2026-06-10 Show GitHub Exploit DB Packet Storm
880 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. CWE-693
 Protection Mechanism Failure
CVE-2026-45656 2026-06-11 05:42 2026-06-10 Show GitHub Exploit DB Packet Storm