Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows プログラム互換性アシスタント サービスの特権昇格の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-45487 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
232 7.5 重要
Network 		Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-45541 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
233 7.1 重要
Adjacent 		Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-45542 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
234 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows Collaborative Translation Framework (CTFMON) の特権昇格の脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-45586 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
235 7.9 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-45588 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
236 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows インターネット (wininet.dll) の特権昇格の脆弱性 CWE-190
CWE-416
CVE-2026-45592 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
237 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft … 		Windows SDK の特権の昇格の脆弱性 CWE-190
CWE-416
CVE-2026-45593 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
238 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows アプリケーション ID (AppID) の情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-45594 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
239 5.4 警告
Network 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows Mark Of The Web セキュリティ機能のバイパスの脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-45595 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
240 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-362
CWE-416
CVE-2026-45596 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355071 - wikkawiki wikkawiki Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter. NVD-CWE-Other
CVE-2005-4255 2011-03-8 11:27 2005-12-15 Show GitHub Exploit DB Packet Storm
355072 - envolution envolution Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the (1) startrow and (2) catid parameter. NOTE: this issu… NVD-CWE-Other
CVE-2005-4262 2011-03-8 11:27 2005-12-15 Show GitHub Exploit DB Packet Storm
355073 - triangle_solutions php_support_tickets Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parame… NVD-CWE-Other
CVE-2005-4264 2011-03-8 11:27 2005-12-15 Show GitHub Exploit DB Packet Storm
355074 - gentoo qt-unixodbc Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary bu… NVD-CWE-Other
CVE-2005-4279 2011-03-8 11:27 2005-12-16 Show GitHub Exploit DB Packet Storm
355075 - - - Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build di… NVD-CWE-Other
CVE-2005-4280 2011-03-8 11:27 2005-12-16 Show GitHub Exploit DB Packet Storm
355076 - zaygo hostingcart Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root pa… NVD-CWE-Other
CVE-2005-4281 2011-03-8 11:27 2005-12-16 Show GitHub Exploit DB Packet Storm
355077 - zaygo domaincart Cross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML, possibly via the root parameter to zaygo.cgi. NVD-CWE-Other
CVE-2005-4282 2011-03-8 11:27 2005-12-16 Show GitHub Exploit DB Packet Storm
355078 - nightmedia the_city_shop Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cg… NVD-CWE-Other
CVE-2005-4283 2011-03-8 11:27 2005-12-16 Show GitHub Exploit DB Packet Storm
355079 - static_store staticstore Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possi… NVD-CWE-Other
CVE-2005-4284 2011-03-8 11:27 2005-12-16 Show GitHub Exploit DB Packet Storm
355080 - dick_copits pdestore Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the search module parameter or … NVD-CWE-Other
CVE-2005-4285 2011-03-8 11:27 2005-12-16 Show GitHub Exploit DB Packet Storm