Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
371 6.5 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-1500 2026-06-15 18:37 2026-06-11 Show GitHub Exploit DB Packet Storm
372 3.1
Network
GitLab.org GitLab GitLab.orgのGitLabにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-3553 2026-06-15 18:37 2026-06-11 Show GitHub Exploit DB Packet Storm
373 8.1 重要
Network
Netty Netty Nettyにおける複数の脆弱性 CWE-284
CWE-697
CVE-2026-44249 2026-06-15 18:37 2026-06-11 Show GitHub Exploit DB Packet Storm
374 7.5 重要
Network
Netty Netty Nettyにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-44250 2026-06-15 18:37 2026-06-11 Show GitHub Exploit DB Packet Storm
375 7.5 重要
Network
Netty Netty Nettyにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-44890 2026-06-15 18:37 2026-06-11 Show GitHub Exploit DB Packet Storm
376 7.5 重要
Network
Netty Netty Nettyにおける複数の脆弱性 CWE-1188
CWE-400
CVE-2026-44892 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
377 7.5 重要
Network
Netty Netty Nettyにおける例外的な状況に対する不適切なチェックまたは処理に関する脆弱性 CWE-703
例外的な状況に対する不適切なチェックまたは処理
CVE-2026-44893 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
378 7.5 重要
Network
Netty Netty Nettyにおける通信チャネルの送信元の不適切な検証に関する脆弱性 CWE-940
通信チャネルの送信元の不適切な検証
CVE-2026-44894 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
379 7.5 重要
Network
Netty Netty Nettyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-45416 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
380 4 警告
Local
Netty Netty Nettyにおける複数の脆弱性 CWE-200
CWE-772
CVE-2026-45536 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257361 5.9 MEDIUM
Network
fiberhome fengine_s5800_firmware An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly… CWE-400
 Uncontrolled Resource Consumption
CVE-2017-5544 2024-11-21 12:27 2017-01-23 Show GitHub Exploit DB Packet Storm
257362 8.8 HIGH
Network
metalgenix genixcms The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files wit… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2017-5520 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257363 9.8 CRITICAL
Network
metalgenix genixcms SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2017-5519 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257364 7.4 HIGH
Network
metalgenix genixcms The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2017-5518 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257365 9.8 CRITICAL
Network
metalgenix genixcms SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter. CWE-89
SQL Injection
CVE-2017-5517 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257366 6.1 MEDIUM
Network
metalgenix genixcms Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters. CWE-79
Cross-site Scripting
CVE-2017-5516 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257367 5.4 MEDIUM
Network
metalgenix genixcms Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names. CWE-79
Cross-site Scripting
CVE-2017-5515 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257368 5.5 MEDIUM
Local
phpmailer_project phpmailer An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to… CWE-200
Information Exposure
CVE-2017-5223 2024-11-21 12:27 2017-01-16 Show GitHub Exploit DB Packet Storm
257369 5.4 MEDIUM
Network
b2evolution b2evolution Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (… CWE-79
Cross-site Scripting
CVE-2017-5494 2024-11-21 12:27 2017-01-16 Show GitHub Exploit DB Packet Storm
257370 8.1 HIGH
Network
b2evolution b2evolution Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to prov… CWE-22
Path Traversal
CVE-2017-5480 2024-11-21 12:27 2017-01-16 Show GitHub Exploit DB Packet Storm