Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191171 7.8 重要
Local
Linux - Linux Kernel における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-15868 2017-12-28 11:18 2017-08-4 Show GitHub Exploit DB Packet Storm
191172 6.1 警告
Network
Atlassian - Atlassian Confluence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-16856 2017-12-28 11:18 2017-12-5 Show GitHub Exploit DB Packet Storm
191173 6.1 警告
Network
Elasticsearch - Kibana におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-11481 2017-12-28 10:50 2017-12-7 Show GitHub Exploit DB Packet Storm
191174 8.8 重要
Network
The HDF Group - HDF5 における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-17509 2017-12-28 10:26 2017-12-8 Show GitHub Exploit DB Packet Storm
191175 6.5 警告
Network
The HDF Group - HDF5 におけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算
CVE-2017-17508 2017-12-28 10:26 2017-12-8 Show GitHub Exploit DB Packet Storm
191176 6.5 警告
Network
The HDF Group - HDF5 における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-17507 2017-12-28 10:26 2017-12-8 Show GitHub Exploit DB Packet Storm
191177 6.5 警告
Network
The HDF Group - HDF5 における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-17506 2017-12-28 10:26 2017-12-8 Show GitHub Exploit DB Packet Storm
191178 6.5 警告
Network
The HDF Group - HDF5 における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-17505 2017-12-28 10:26 2017-12-8 Show GitHub Exploit DB Packet Storm
191179 6.1 警告
Network
GEOVAP, spol. s r.o. - Geovap Reliance SCADA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-16721 2017-12-27 17:39 2017-10-21 Show GitHub Exploit DB Packet Storm
191180 9.8 緊急
Network
iSmart Alarm, Inc. - iSmartAlarm CubeOne における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-13664 2017-12-27 17:39 2017-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2291 9.8 CRITICAL
Network
- - ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Versions 2.0.18 through 3.0.8 have a pre-authentication heap memory corruption vulnerability in the MySQL and PostgreSQL protocol f… CWE-787
 Out-of-bounds Write
CVE-2026-48773 2026-06-24 00:55 2026-06-20 Show GitHub Exploit DB Packet Storm
2292 - - - @microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API clients. In versions 1.0.0-preview.97 through 1.0.0-preview.101, `@microsoft/kiota-http-fetchlibrary`'s `Redir… CWE-178
CWE-200
 Improper Handling of Case Sensitivity
Information Exposure
CVE-2026-49336 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
2293 7.1 HIGH
Network
- - gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit `6dd71e6a3c966867ef8c900d359a7df75789f410` added an ownership check based on `pla… CWE-22
CWE-639
Path Traversal
 Authorization Bypass Through User-Controlled Key
CVE-2026-49339 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
2294 6.5 MEDIUM
Network
- - Kestra is an open-source, event-driven orchestration platform. Prior to versions 1.3.19, 1.2.19, 1.1.19, and 1.0.43, Kestra task `inputFiles` writes rendered file names directly under the task workin… CWE-22
Path Traversal
CVE-2026-48129 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
2295 4.3 MEDIUM
Network
- - libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes `decoder_context::read_slice_NAL()` (`libde265/decctx.cc:481`… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-49337 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
2296 - - - launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path… CWE-73
CWE-522
 External Control of File Name or Path
 Insufficiently Protected Credentials
CVE-2026-53632 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
2297 5.3 MEDIUM
Network
- - @astrojs/netlify is an adapter that allows Astro to deploy your hybrid or server rendered site to Netlify. Prior to 7.0.13, @astrojs/netlify converts Astro image.remotePatterns into Netlify Image CDN… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-54300 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
2298 - - - Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause denial of service. Plug.Conn.Query.decode/4 (and Plug.Conn.Query.decode_each/2… CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-54892 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
2299 - - - An HTML injection vulnerability exists in the Google Chat webhook notification  sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An attacker can insert l… CWE-74
Injection
CVE-2026-12888 2026-06-24 00:42 2026-06-22 Show GitHub Exploit DB Packet Storm
2300 6.8 MEDIUM
Local
- - The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously… CWE-415
 Double Free
CVE-2026-56109 2026-06-24 00:42 2026-06-23 Show GitHub Exploit DB Packet Storm