Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
281	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20257	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

282	5.4	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-20258	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

283	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2026-22893	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

284	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-24716	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

285	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2026-24719	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

286	5.3	警告 Network	NAVTOR AS	NavBox Firmware	NAVTOR ASのNavBox Firmwareにおけるエラーメッセージによる情報漏えいに関する脆弱性 New	CWE-209 エラーメッセージによる情報漏えい	CVE-2026-2752	2026-06-16 13:38	2026-03-6	Show	GitHub Exploit DB Packet Storm

287	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-34180	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

288	7.4	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるデータの整合性検証不備に関する脆弱性 New	CWE-354 データの整合性検証不備	CVE-2026-34181	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

289	9.1	緊急 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるデータの整合性検証不備に関する脆弱性 New	CWE-354 データの整合性検証不備	CVE-2026-34182	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

290	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける不適切に制御された順次メモリ割り当てに関する脆弱性 New	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-34183	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257601	7.5	HIGH Network	openssl nodejs	openssl node.js	If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resu…	CWE-125 Out-of-bounds Read	CVE-2017-3731	2024-11-21 12:26	2017-05-5	Show	GitHub Exploit DB Packet Storm

257602	5.9	MEDIUM Network	openssl nodejs	openssl node.js	There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks agai…	CWE-200 Information Exposure	CVE-2017-3732	2024-11-21 12:26	2017-05-5	Show	GitHub Exploit DB Packet Storm

257603	7.5	HIGH Network	openssl oracle	openssl jd_edwards_enterpriseone_tools agile_engineering_data_management jd_edwards_world_security communications_operations_monitor communications_eagle_lnp_application_processor c…	In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a …	CWE-476 NULL Pointer Dereference	CVE-2017-3730	2024-11-21 12:26	2017-05-5	Show	GitHub Exploit DB Packet Storm

257604	6.7	MEDIUM Local	dell	emc_data_domain_os	EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected …	NVD-CWE-noinfo	CVE-2017-4983	2024-11-21 12:26	2017-05-4	Show	GitHub Exploit DB Packet Storm

257605	8.8	HIGH Network	google	chrome	An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5051	2024-11-21 12:26	2017-04-25	Show	GitHub Exploit DB Packet Storm

257606	8.8	HIGH Network	google	chrome	An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5050	2024-11-21 12:26	2017-04-25	Show	GitHub Exploit DB Packet Storm

257607	8.8	HIGH Network	google	chrome	An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5049	2024-11-21 12:26	2017-04-25	Show	GitHub Exploit DB Packet Storm

257608	8.8	HIGH Network	google	chrome	An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5048	2024-11-21 12:26	2017-04-25	Show	GitHub Exploit DB Packet Storm

257609	8.8	HIGH Network	google	chrome	An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5047	2024-11-21 12:26	2017-04-25	Show	GitHub Exploit DB Packet Storm

257610	4.3	MEDIUM Network	google redhat debian	chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux	V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object v…	NVD-CWE-noinfo	CVE-2017-5046	2024-11-21 12:26	2017-04-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed