Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228241	6.8	警告	Crunchify	-	WordPress 用 FourSquare Checkins プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2709	2013-04-30 17:54	2013-04-22	Show	GitHub Exploit DB Packet Storm

228242	6.8	警告	Crunchify	-	WordPress 用 All in One Webmaster プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2696	2013-04-30 17:52	2013-04-22	Show	GitHub Exploit DB Packet Storm

228243	5	警告	Blink Web Effects	-	WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性	CWE-noinfo 情報不足	CVE-2013-1949	2013-04-30 17:51	2013-04-9	Show	GitHub Exploit DB Packet Storm

228244	10	危険	Rob Westgeest	-	Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-1948	2013-04-30 17:51	2013-04-10	Show	GitHub Exploit DB Packet Storm

228245	9.3	危険	Kelly D. Redding	-	Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1947	2013-04-30 17:50	2013-04-4	Show	GitHub Exploit DB Packet Storm

228246	9.3	危険	karteek-docsplit	-	Ruby 用 Karteek Docsplit gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1933	2013-04-30 17:49	2013-04-1	Show	GitHub Exploit DB Packet Storm

228247	6.8	警告	Novell plataformatec	-	Ruby 用 Devise gem における不正な結果が返される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0233	2013-04-30 17:48	2013-01-28	Show	GitHub Exploit DB Packet Storm

228248	7.5	危険	Grape Erik Michaels-Ober	-	Grape などの製品で使用される Ruby 用 multi_xml gem におけるオブジェクトインジェクション攻撃を誘発される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0175	2013-04-30 17:43	2013-01-10	Show	GitHub Exploit DB Packet Storm

228249	5	警告	Ruby-lang.org	-	Ruby における safe-level の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4466	2013-04-30 17:29	2012-10-3	Show	GitHub Exploit DB Packet Storm

228250	5	警告	Ruby-lang.org	-	Ruby における safe-level の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4464	2013-04-30 17:25	2012-10-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
851	7.8	HIGH Local	microsoft	365_apps microsoft_365 office_2016 office_2019 office_2021 office_2024 sharepoint_server	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	CWE-122 Heap-based Buffer Overflow	CVE-2026-44819	2026-06-12 03:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

852	5.5	MEDIUM Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.	CWE-125 Out-of-bounds Read	CVE-2026-45606	2026-06-12 03:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

853	7.8	HIGH Local	microsoft	365_apps microsoft_365 office_2021 office_2024	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.	CWE-125 Out-of-bounds Read	CVE-2026-45457	2026-06-12 03:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

854	7.8	HIGH Local	microsoft	365_apps excel microsoft_365 office_2019 office_2021 office_2024 office_online_server	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	CWE-843 Type Confusion	CVE-2026-44817	2026-06-12 03:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

855	7.0	HIGH Local	microsoft	365_apps excel microsoft_365 office_2019 office_2021 office_2024 office_online_server	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	CWE-362 Race Condition	CVE-2026-44818	2026-06-12 03:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

856	7.8	HIGH Local	microsoft	365_apps excel microsoft_365 office_2019 office_2021 office_2024 office_online_server	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	CWE-125 Out-of-bounds Read	CVE-2026-44820	2026-06-12 03:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

857	8.2	HIGH Network	microsoft	365_apps excel microsoft_365 office_2019 office_2021 office_2024 office_online_server	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.	CWE-125 Out-of-bounds Read	CVE-2026-44822	2026-06-12 03:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

858	3.3	LOW Local	microsoft	365_apps microsoft_365 office_2021 office_2024	Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.	CWE-693 Protection Mechanism Failure	CVE-2026-45459	2026-06-12 03:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

859	7.8	HIGH Local	microsoft	365_apps excel microsoft_365 office_2019 office_2021 office_2024 office_online_server	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	CWE-122 CWE-191 Heap-based Buffer Overflow Integer Underflow (Wrap or Wraparound)	CVE-2026-45469	2026-06-12 03:37	2026-06-10	Show	GitHub Exploit DB Packet Storm

860	3.3	LOW Local	microsoft	365_apps microsoft_365 office_2016 office_2019 office_2021 office_2024 sharepoint_server	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	CWE-125 Out-of-bounds Read	CVE-2026-45485	2026-06-12 03:37	2026-06-10	Show	GitHub Exploit DB Packet Storm