Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
271 7.2 重要
Network
Open Source Geospatial Foundation geoserver Open Source Geospatial Foundationのgeoserverにおける複数の脆弱性 CWE-502
CWE-74
CVE-2025-27511 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
272 7.2 重要
Network
Open Source Geospatial Foundation geoserver Open Source Geospatial Foundationのgeoserverにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御
CVE-2025-52465 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
273 8.2 重要
Network
Open Source Geospatial Foundation geoserver Open Source Geospatial Foundationのgeoserverにおける複数の脆弱性 CWE-20
CWE-611
CWE-918
CVE-2025-58175 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
274 9.8 緊急
Network
Ivanti standalone sentry Ivantiのstandalone sentryにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-10523 2026-06-24 10:00 2026-06-9 Show GitHub Exploit DB Packet Storm
275 7.5 重要
Network
デル PowerFlex Manager デルのPowerFlex Managerにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-22283 2026-06-24 10:00 2026-06-17 Show GitHub Exploit DB Packet Storm
276 6.5 警告
Network
Eclipse Foundation Theia Eclipse FoundationのTheiaにおける複数の脆弱性 CWE-201
CWE-829
CVE-2026-22551 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
277 5.4 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-32208 2026-06-24 10:00 2026-06-19 Show GitHub Exploit DB Packet Storm
278 8.1 重要
Adjacent
デル PowerFlex Manager デルのPowerFlex Managerにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-32804 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
279 8.8 重要
Adjacent
デル PowerFlex Manager デルのPowerFlex Managerにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-35065 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
280 7.1 重要
Network
デル PowerFlex Manager デルのPowerFlex Managerにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35066 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259461 9.8 CRITICAL
Network
libtiff libtiff LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-5225 2024-11-21 12:27 2017-01-12 Show GitHub Exploit DB Packet Storm
259462 7.5 HIGH
Network
samsung samsung_mobile Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016… CWE-400
 Uncontrolled Resource Consumption
CVE-2017-5351 2024-11-21 12:27 2017-01-12 Show GitHub Exploit DB Packet Storm
259463 7.5 HIGH
Network
samsung samsung_mobile Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122. NVD-CWE-noinfo
CVE-2017-5350 2024-11-21 12:27 2017-01-12 Show GitHub Exploit DB Packet Storm
259464 7.2 HIGH
Network
metalgenix genixcms SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/ind… CWE-89
SQL Injection
CVE-2017-5347 2024-11-21 12:27 2017-01-12 Show GitHub Exploit DB Packet Storm
259465 7.2 HIGH
Network
genixcms genixcms SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin… CWE-89
SQL Injection
CVE-2017-5346 2024-11-21 12:27 2017-01-12 Show GitHub Exploit DB Packet Storm
259466 8.8 HIGH
Network
metalgenix genixcms SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default… CWE-89
SQL Injection
CVE-2017-5345 2024-11-21 12:27 2017-01-12 Show GitHub Exploit DB Packet Storm
259467 9.1 CRITICAL
Network
libimobiledevice libplist The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) vi… CWE-125
Out-of-bounds Read
CVE-2017-5209 2024-11-21 12:27 2017-01-12 Show GitHub Exploit DB Packet Storm
259468 9.8 CRITICAL
Network
php
netapp
php
clustered_data_ontap
Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial o… CWE-190
 Integer Overflow or Wraparound
CVE-2017-5340 2024-11-21 12:27 2017-01-11 Show GitHub Exploit DB Packet Storm
259469 5.5 MEDIUM
Local
netop remote_control Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially design… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-5216 2024-11-21 12:27 2017-01-9 Show GitHub Exploit DB Packet Storm
259470 5.5 MEDIUM
Local
samsung samsung_mobile Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually crash the system_server process in the Android OS. Th… CWE-119
CWE-20
Incorrect Access of Indexable Resource ('Range Error') 
 Improper Input Validation 
CVE-2017-5217 2024-11-21 12:27 2017-01-9 Show GitHub Exploit DB Packet Storm