Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216781 6 警告 （複数のベンダ） - Intel BIOS ロッキングメカニズムに競合状態の脆弱性 CWE-362
競合状態 		CVE-2014-8273 2015-01-7 16:46 2015-01-5 Show GitHub Exploit DB Packet Storm
216782 6.8 警告 Zaunz GmbH - CosmoShop の cgi-bin/admin/setup_edit.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5306 2015-01-7 16:23 2011-03-10 Show GitHub Exploit DB Packet Storm
216783 4.3 警告 Zaunz GmbH - CosmoShop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5305 2015-01-7 16:23 2011-03-10 Show GitHub Exploit DB Packet Storm
216784 6.8 警告 poMMo - poMMo Aardvark の admin/setup/config/users.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5300 2015-01-7 15:57 2011-05-10 Show GitHub Exploit DB Packet Storm
216785 4.3 警告 poMMo - poMMo Aardvark におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5299 2015-01-7 15:56 2011-04-26 Show GitHub Exploit DB Packet Storm
216786 4.3 警告 Spitfire - Spitfire CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5303 2015-01-7 15:43 2011-03-29 Show GitHub Exploit DB Packet Storm
216787 6.8 警告 Diafan - diafan.CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5318 2015-01-7 15:39 2011-01-11 Show GitHub Exploit DB Packet Storm
216788 4.3 警告 WonderCMS - WonderCMS の editText.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5317 2015-01-7 15:20 2011-01-4 Show GitHub Exploit DB Packet Storm
216789 6.8 警告 Cambio project - Cambio の admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5316 2015-01-7 15:11 2011-01-11 Show GitHub Exploit DB Packet Storm
216790 6.8 警告 whCMS project - whCMS の admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5315 2015-01-7 15:08 2011-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1271 5.5 MEDIUM
Local 		microsoft windows_server_2019
windows_server_2022
windows_server_2025 		Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally. CWE-416
CWE-822
 Use After Free
 Untrusted Pointer Dereference 		CVE-2026-44805 2026-06-12 03:55 2026-06-10 Show GitHub Exploit DB Packet Storm
1272 8.8 HIGH
Network 		microsoft windows_server_2022
windows_server_2025 		Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. CWE-121
Stack-based Buffer Overflow 		CVE-2026-45648 2026-06-12 03:54 2026-06-10 Show GitHub Exploit DB Packet Storm
1273 7.5 HIGH
Network 		svelte svelte Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in <svelte:element this={tag}><… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2026-42567 2026-06-12 03:54 2026-06-10 Show GitHub Exploit DB Packet Storm
1274 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. CWE-122
CWE-416
Heap-based Buffer Overflow
 Use After Free 		CVE-2026-45653 2026-06-12 03:54 2026-06-10 Show GitHub Exploit DB Packet Storm
1275 7.5 HIGH
Network 		svelte devalue Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From version 5.6.3 to before version 5.8.1, devalue.parse could, due to qu… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42570 2026-06-12 03:52 2026-06-10 Show GitHub Exploit DB Packet Storm
1276 7.9 HIGH
Local 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. CWE-284
Improper Access Control 		CVE-2026-45654 2026-06-12 03:51 2026-06-10 Show GitHub Exploit DB Packet Storm
1277 5.3 MEDIUM
Physics 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. CWE-693
 Protection Mechanism Failure 		CVE-2026-45655 2026-06-12 03:48 2026-06-10 Show GitHub Exploit DB Packet Storm
1278 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-45601 2026-06-12 03:47 2026-06-10 Show GitHub Exploit DB Packet Storm
1279 6.1 MEDIUM
Network 		svelte svelte Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. This … CWE-79
Cross-site Scripting 		CVE-2026-42573 2026-06-12 03:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1280 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-45603 2026-06-12 03:46 2026-06-10 Show GitHub Exploit DB Packet Storm