Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理
CVE-2026-12018 2026-06-26 11:48 2026-06-11 Show GitHub Exploit DB Packet Storm
252 5.5 警告
Local
東芝 Generic IO & Memory Access ドライバー 東芝製およびDynabook製PC搭載Generic IO & Memory Access ドライバーのIOCTLインタフェースに対するアクセス制御が不十分 New CWE-782
不十分なアクセス制御による IOCTL の公開
CVE-2026-56129 2026-06-26 09:44 2026-06-25 Show GitHub Exploit DB Packet Storm
253 6.7 警告
Local
ソニー株式会社 Optical Disc Archive Software Optical Disc Archive Software(Windows版)のインストーラにおけるインストール時の不適切なファイルアクセス権設定の脆弱性 Update CWE-Other
その他
CVE-2026-50255 2026-06-25 16:27 2026-06-16 Show GitHub Exploit DB Packet Storm
254 - - (複数のベンダ) (複数の製品) CISA ICS Advisory / ICS Medical Advisory(2026年06月23日) New - - 2026-06-25 10:59 2026-06-24 Show GitHub Exploit DB Packet Storm
255 - - 日立 Hitachi Ops Center Analyzer viewpoint
Hitachi Infrastructure Analytics Advisor
Hitachi Ops Center Viewpoint
Hitachi Ops Center&nbs…
Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Analyzer viewpointおよびHitachi Ops Center Viewpointにおける複数の脆弱性 New - CVE-2023-35116
CVE-2025-24970
CVE-2025-25193
CVE-2025-48924
CVE-2025-55163
CVE-2025-58056
CVE-2025-58057
2026-06-25 09:25 2026-06-23 Show GitHub Exploit DB Packet Storm
256 - - 横河電機株式会社 統合情報サーバ(CIサーバ)
FAST/TOOLS
横河電機製FAST/TOOLSおよびCI Serverにおける重要情報の平文送信の脆弱性 New CWE-319
重要な情報の平文での送信
CVE-2026-11833 2026-06-24 14:38 2026-06-23 Show GitHub Exploit DB Packet Storm
257 - - (複数のベンダ) (複数の製品) Microsoft Windows Recovery EnvironmentにおけるUEFI/BIOSパスワード制限回避の脆弱性 New - - 2026-06-24 14:38 2026-06-23 Show GitHub Exploit DB Packet Storm
258 - - (複数のベンダ) (複数の製品) FastStone Image Viewerにおけるファイル解析に関する複数の脆弱性 New - - 2026-06-24 14:38 2026-06-23 Show GitHub Exploit DB Packet Storm
259 9.8 緊急
Network
InHand Networks IR915L-FQ39-S Firmware
IR912L-FQ58 Firmware
InHand NetworksのIR912L-FQ58 Firmware等の複数製品におけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-38714 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
260 9.8 緊急
Network
InHand Networks IR915L-FQ39-S Firmware
IR912L-FQ58 Firmware
InHand NetworksのIR912L-FQ58 Firmware等の複数製品におけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-38715 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259511 8.8 HIGH
Network
gaku tablacus_explorer Tablacus Explorer 17.3.30 and earlier allows arbitrary scripts to be executed in the context of the application due to specially crafted directory. CWE-74
Injection
CVE-2017-2140 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259512 5.3 MEDIUM
Network
frogman_office_inc cs-cart CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to bypass access restriction… CWE-425
 Direct Request ('Forced Browsing')
CVE-2017-2139 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259513 3.7 LOW
Network
netgear prosafe_plus_configuration_utility ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests. NVD-CWE-noinfo
CVE-2017-2137 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259514 6.1 MEDIUM
Network
wp_statistics wp_statistics Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers. CWE-79
Cross-site Scripting
CVE-2017-2136 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259515 6.1 MEDIUM
Network
wp-statistics wp_statistics Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2017-2135 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259516 6.1 MEDIUM
Network
uchida assetbase Cross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2017-2134 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259517 7.8 HIGH
Local
securebrain phishwall_client Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unsp… CWE-426
 Untrusted Search Path
CVE-2017-2130 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259518 8.8 HIGH
Network
information-technology_promotion_agency introduction_to_safe_website_operation Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data. CWE-78
OS Command 
CVE-2017-2128 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259519 5.4 MEDIUM
Network
yop-poll yop_poll Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2017-2127 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm
259520 8.8 HIGH
Network
allied_telesis_k.k. centrecom_ar260s_v2_firmware Privilege escalation vulnerability in CentreCOM AR260S V2 remote authenticated attackers to gain privileges via the guest account. NVD-CWE-noinfo
CVE-2017-2125 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm