Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190491 9.8 緊急
Network 		Inedo - Inedo Otter における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-17086 2017-12-27 15:19 2017-11-30 Show GitHub Exploit DB Packet Storm
190492 9.8 緊急
Network 		Inedo - Inedo Otter におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-15607 2017-12-27 15:19 2017-11-15 Show GitHub Exploit DB Packet Storm
190493 5.5 警告
Local 		aubio - aubio におけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2017-17054 2017-12-27 15:14 2017-11-28 Show GitHub Exploit DB Packet Storm
190494 7.5 重要
Network 		WooCommerce project - WordPress 用 WooCommerce プラグインにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-17058 2017-12-27 15:11 2017-11-28 Show GitHub Exploit DB Packet Storm
190495 9.8 緊急
Network 		Haxx
Debian		 - cURL および libcurl における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-8817 2017-12-27 15:06 2017-11-10 Show GitHub Exploit DB Packet Storm
190496 9.8 緊急
Network 		Haxx
Debian		 - cURL および libcurl における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2017-8816 2017-12-27 15:06 2017-11-6 Show GitHub Exploit DB Packet Storm
190497 6.5 警告
Network 		Synology Inc. - Synology Router Manager におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-15895 2017-12-27 15:02 2017-11-15 Show GitHub Exploit DB Packet Storm
190498 6.5 警告
Network 		Synology Inc. - Synology DiskStation Manager におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-15894 2017-12-27 15:02 2017-11-15 Show GitHub Exploit DB Packet Storm
190499 6.5 警告
Network 		Synology Inc. - Synology File Station におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-15893 2017-12-27 15:02 2017-11-15 Show GitHub Exploit DB Packet Storm
190500 6.5 警告
Network 		Synology Inc. - Synology Calendar におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-15891 2017-12-27 15:02 2017-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3381 5.3 MEDIUM
Network 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possib… CWE-400
CWE-407
CWE-674
 Uncontrolled Resource Consumption
 Inefficient Algorithmic Complexity
 Uncontrolled Recursion 		CVE-2026-45664 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
3382 5.1 MEDIUM
Local 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion an out of bounds over-… CWE-125
CWE-129
Out-of-bounds Read
 Improper Validation of Array Index 		CVE-2026-45624 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
3383 5.7 MEDIUM
Local 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value could result in… CWE-125
CWE-129
Out-of-bounds Read
 Improper Validation of Array Index 		CVE-2026-45359 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
3384 5.3 MEDIUM
Network 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bo… CWE-125
CWE-193
Out-of-bounds Read
 Off-by-one Error 		CVE-2026-45358 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
3385 6.1 MEDIUM
Network 		svelte svelte Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML … CWE-79
Cross-site Scripting 		CVE-2026-42599 2026-06-12 03:41 2026-06-10 Show GitHub Exploit DB Packet Storm
3386 5.3 MEDIUM
Network 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible… CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling 		CVE-2026-45031 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
3387 5.1 MEDIUM
Local 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could … CWE-125
CWE-191
Out-of-bounds Read
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-42326 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
3388 5.5 MEDIUM
Local 		microsoft windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. CWE-125
Out-of-bounds Read 		CVE-2026-45604 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
3389 8.4 HIGH
Local 		microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server 		Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. CWE-843
Type Confusion 		CVE-2026-45456 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
3390 7.8 HIGH
Local 		microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server 		Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CWE-122
Heap-based Buffer Overflow 		CVE-2026-44824 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm