Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199511 8.6 重要
Network
Locus Energy - 複数の Locus Energy LGate 製品における脆弱性 CWE-20
不適切な入力確認
CVE-2016-5782 2017-04-4 15:10 2016-12-6 Show GitHub Exploit DB Packet Storm
199512 7.2 重要
Network
XOOPS - XOOPS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-7290 2017-04-4 11:31 2017-03-30 Show GitHub Exploit DB Packet Storm
199513 7.2 重要
Network
DELL EMC (旧 EMC Corporation) - EMC Isilon OneFS における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-9871 2017-04-3 18:27 2016-12-6 Show GitHub Exploit DB Packet Storm
199514 5.3 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA BSAFE Crypto-J の PKCS#12 ファイルにおけるタイミング攻撃を実行される脆弱性 CWE-200
情報漏えい
CVE-2016-8217 2017-04-3 18:27 2016-09-13 Show GitHub Exploit DB Packet Storm
199515 6.7 警告
Local
DELL EMC (旧 EMC Corporation) - EMC Data Domain OS におけるコマンドインジェクションの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8216 2017-04-3 18:27 2016-09-13 Show GitHub Exploit DB Packet Storm
199516 4.8 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA BSAFE Crypto-J における OCSP が不正に検証される脆弱性 CWE-254
セキュリティ機能
CVE-2016-8212 2017-04-3 18:27 2016-09-13 Show GitHub Exploit DB Packet Storm
199517 7.5 重要
Network
DELL EMC (旧 EMC Corporation) - EMC Data Protection Advisor におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-8211 2017-04-3 18:27 2016-09-13 Show GitHub Exploit DB Packet Storm
199518 5.9 警告
Network
シトリックス・システムズ - Citrix NetScaler ADC および NetScaler Gateway における GCM 認証キーを取得される脆弱性 CWE-200
情報漏えい
CVE-2017-5933 2017-04-3 18:06 2017-02-6 Show GitHub Exploit DB Packet Storm
199519 5.9 警告
Network
マカフィー - Intel Security McAfee Agent のリモートログ表示機能における予期しない入力パラメータを渡される脆弱性 CWE-20
不適切な入力確認
CVE-2017-3896 2017-04-3 18:05 2017-01-17 Show GitHub Exploit DB Packet Storm
199520 6.1 警告
Network
Lutim projet - Lutim が処理する SVG ファイルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-6877 2017-04-3 17:58 2017-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
531 7.9 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-693
 Protection Mechanism Failure
CVE-2026-48570 2026-06-11 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
532 4.4 MEDIUM
Local
- - Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafti… New CWE-416
 Use After Free
CVE-2026-52757 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
533 7.8 HIGH
Local
- - Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with travers… New CWE-22
Path Traversal
CVE-2026-52752 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
534 5.5 MEDIUM
Local
- - Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O b… New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-49495 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
535 5.4 MEDIUM
Network
- - Umbraco is an ASP.NET CMS. Prior to versions 13.14.0 and 17.4.0, some of the Surface Controllers in the CMS provide to support member related operations fail to validate redirect URLs, making Razor t… New CWE-601
Open Redirect
CVE-2026-46616 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm
536 4.6 MEDIUM
Network
- - Umbraco is an ASP.NET CMS. From version 14.0.0 to before version 17.4.0, authenticated users are able to inject HTML into an input field, which is rendered in the confirmation dialog without proper o… New CWE-79
Cross-site Scripting
CVE-2026-46609 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm
537 8.3 HIGH
Network
- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, there is an authentication bypass vulnerability via 'api' substring in URL + unau… New CWE-287
CWE-306
CWE-697
Improper Authentication
Missing Authentication for Critical Function
 Incorrect Comparison
CVE-2026-45567 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm
538 6.1 MEDIUM
Network
- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the login flow allow-lists next URLs by rejecting strings containing https:// or … New CWE-601
Open Redirect
CVE-2026-45566 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm
539 6.5 MEDIUM
Network
- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the /smon/agent/{version,uptime,status,checks}/<server_ip> family of routes takes… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45561 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm
540 6.1 MEDIUM
Network
- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, wrap_line (app/modules/common/common.py:181-186) and highlight_word (app/modules/… New CWE-79
Cross-site Scripting
CVE-2026-45560 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm