Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193771 6.5 警告
Network 		heinekingmedia GmbH - heinekingmedia StashCat における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-11134 2017-09-1 11:46 2017-07-31 Show GitHub Exploit DB Packet Storm
193772 7.5 重要
Network 		heinekingmedia GmbH - heinekingmedia StashCat における暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2017-11133 2017-09-1 11:46 2017-07-31 Show GitHub Exploit DB Packet Storm
193773 7.5 重要
Network 		heinekingmedia GmbH - heinekingmedia StashCat における暗号に関する脆弱性 CWE-310
暗号の問題 		CVE-2017-11132 2017-09-1 11:46 2017-07-31 Show GitHub Exploit DB Packet Storm
193774 5.9 警告
Network 		heinekingmedia GmbH - heinekingmedia StashCat における暗号に関する脆弱性 CWE-310
暗号の問題 		CVE-2017-11131 2017-09-1 11:46 2017-07-31 Show GitHub Exploit DB Packet Storm
193775 8.1 重要
Network 		heinekingmedia GmbH - heinekingmedia StashCat における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-11130 2017-09-1 11:46 2017-07-31 Show GitHub Exploit DB Packet Storm
193776 9.8 緊急
Network 		heinekingmedia GmbH - heinekingmedia StashCat におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2017-11129 2017-09-1 11:46 2017-07-31 Show GitHub Exploit DB Packet Storm
193777 9.8 緊急
Network 		トレンドマイクロ - Trend Micro Deep Discovery Director におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2017-11380 2017-09-1 11:43 2017-07-12 Show GitHub Exploit DB Packet Storm
193778 7.5 重要
Network 		トレンドマイクロ - Trend Micro Deep Discovery Director におけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2017-11379 2017-09-1 11:43 2017-07-12 Show GitHub Exploit DB Packet Storm
193779 6.1 警告
Network 		Trello, Inc. - iOS 用 Trello アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-9244 2017-09-1 11:19 2017-07-12 Show GitHub Exploit DB Packet Storm
193780 9.8 緊急
Network 		UNIT4 - Unit4 Polska TETA Web におけるセッションの固定化の脆弱性 CWE-384
セッションの固定化 		CVE-2015-1174 2017-09-1 11:19 2015-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
431 5.1 MEDIUM
Local 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion an out of bounds over-… New CWE-125
CWE-129
Out-of-bounds Read
 Improper Validation of Array Index 		CVE-2026-45624 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
432 5.7 MEDIUM
Local 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value could result in… New CWE-125
CWE-129
Out-of-bounds Read
 Improper Validation of Array Index 		CVE-2026-45359 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
433 5.3 MEDIUM
Network 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bo… New CWE-125
CWE-193
Out-of-bounds Read
 Off-by-one Error 		CVE-2026-45358 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
434 6.1 MEDIUM
Network 		svelte svelte Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML … New CWE-79
Cross-site Scripting 		CVE-2026-42599 2026-06-12 03:41 2026-06-10 Show GitHub Exploit DB Packet Storm
435 5.3 MEDIUM
Network 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible… New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling 		CVE-2026-45031 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
436 5.1 MEDIUM
Local 		imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could … New CWE-125
CWE-191
Out-of-bounds Read
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-42326 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
437 5.5 MEDIUM
Local 		microsoft windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. New CWE-125
Out-of-bounds Read 		CVE-2026-45604 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
438 8.4 HIGH
Local 		microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server 		Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. New CWE-843
Type Confusion 		CVE-2026-45456 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
439 7.8 HIGH
Local 		microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server 		Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. New CWE-122
Heap-based Buffer Overflow 		CVE-2026-44824 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
440 5.5 MEDIUM
Local 		microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server 		Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. New CWE-125
Out-of-bounds Read 		CVE-2026-44821 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm