Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
341 7.8 重要
Local
X.Org Foundation
レッドハット
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-50261 2026-06-16 13:35 2026-06-5 Show GitHub Exploit DB Packet Storm
342 5.5 警告
Local
X.Org Foundation
レッドハット
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-50262 2026-06-16 13:35 2026-06-5 Show GitHub Exploit DB Packet Storm
343 7.8 重要
Local
マイクロソフト Microsoft PC Manager Microsoft PC Manager の特権昇格の脆弱性 New CWE-59
リンク解釈の問題
CVE-2026-50511 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
344 7.8 重要
Local
マイクロソフト Microsoft PC Manager Microsoft PC Manager の特権昇格の脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-50512 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
345 9.1 緊急
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける代替名による認証回避に関する脆弱性 New CWE-289
代替名による認証回避
CVE-2026-50627 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
346 9.8 緊急
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認
CVE-2026-50628 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
347 7.8 重要
Local
Vim Vim Vimにおける複数の脆弱性 New CWE-829
CWE-94
CWE-95
CVE-2026-52858 2026-06-16 13:35 2026-06-11 Show GitHub Exploit DB Packet Storm
348 8.2 重要
Network
Vim Vim Vimにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-52859 2026-06-16 13:35 2026-06-11 Show GitHub Exploit DB Packet Storm
349 7.8 重要
Local
Vim Vim Vimにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション
CVE-2026-52860 2026-06-16 13:35 2026-06-11 Show GitHub Exploit DB Packet Storm
350 5.4 警告
Network
Jenkins プロジェクト Jenkins Jenkinsにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-53441 2026-06-16 13:35 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258861 8.8 HIGH
Network
atla electronic_tendering_and_bid_opening_system Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unsp… CWE-426
 Untrusted Search Path
CVE-2017-2178 2024-11-21 12:23 2017-06-10 Show GitHub Exploit DB Packet Storm
258862 8.8 HIGH
Network
shogyo touki_denshi Untrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path
CVE-2017-2177 2024-11-21 12:23 2017-06-10 Show GitHub Exploit DB Packet Storm
258863 7.8 HIGH
Local
jasdf screensavers Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) availa… CWE-426
 Untrusted Search Path
CVE-2017-2176 2024-11-21 12:23 2017-06-10 Show GitHub Exploit DB Packet Storm
258864 6.5 MEDIUM
Network
groupsession groupsession GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors. CWE-200
Information Exposure
CVE-2017-2165 2024-11-21 12:23 2017-06-10 Show GitHub Exploit DB Packet Storm
258865 5.3 MEDIUM
Network
juniper junos_space On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition. NVD-CWE-noinfo
CVE-2017-2311 2024-11-21 12:23 2017-05-30 Show GitHub Exploit DB Packet Storm
258866 5.3 MEDIUM
Network
juniper junos_space A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk. NVD-CWE-noinfo
CVE-2017-2310 2024-11-21 12:23 2017-05-30 Show GitHub Exploit DB Packet Storm
258867 5.9 MEDIUM
Network
juniper junos_space On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. Th… CWE-200
Information Exposure
CVE-2017-2309 2024-11-21 12:23 2017-05-30 Show GitHub Exploit DB Packet Storm
258868 6.5 MEDIUM
Network
juniper junos_space An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device. CWE-611
XXE
CVE-2017-2308 2024-11-21 12:23 2017-05-30 Show GitHub Exploit DB Packet Storm
258869 6.1 MEDIUM
Network
juniper junos_space A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or pe… CWE-79
Cross-site Scripting
CVE-2017-2307 2024-11-21 12:23 2017-05-30 Show GitHub Exploit DB Packet Storm
258870 8.8 HIGH
Network
juniper junos_space On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device. CWE-863
 Incorrect Authorization
CVE-2017-2306 2024-11-21 12:23 2017-05-30 Show GitHub Exploit DB Packet Storm