Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
31 6.5 警告
Network 		デル PowerFlex Manager デルのPowerFlex Managerにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-35162 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
32 4.8 警告
Network 		デル PowerFlex Manager デルのPowerFlex Managerにおける暗号アルゴリズムの使用に関する脆弱性 New CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2026-40641 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
33 8.8 重要
Network 		Eclipse Foundation Theia Eclipse FoundationのTheiaにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 New CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-44688 2026-06-24 09:59 2026-06-18 Show GitHub Exploit DB Packet Storm
34 8.8 重要
Network 		Eclipse Foundation Theia Eclipse FoundationのTheiaにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 New CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-44691 2026-06-24 09:59 2026-06-18 Show GitHub Exploit DB Packet Storm
35 8.8 重要
Network 		Eclipse Foundation Theia Eclipse FoundationのTheiaにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 New CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-46580 2026-06-24 09:59 2026-06-18 Show GitHub Exploit DB Packet Storm
36 8.1 重要
Adjacent 		デル PowerFlex Manager デルのPowerFlex Managerにおける認証に関する脆弱性 New CWE-287
不適切な認証 		CVE-2026-49502 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
37 6.1 警告
Network 		Astro Astro Astroにおけるクロスサイトスクリプティングの脆弱性 New CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-50146 2026-06-24 09:59 2026-06-22 Show GitHub Exploit DB Packet Storm
38 6.1 警告
Network 		Astro Astro Astroにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-54298 2026-06-24 09:59 2026-06-22 Show GitHub Exploit DB Packet Storm
39 4.6 警告 Iomega ZIP drive for Iomega ZIP-100 disks IomegaのZIP drive for Iomega ZIP-100 disksにおける不特定の脆弱性 New CWE-Other
その他 		CVE-1999-1174 2026-06-23 11:22 2001-12-21 Show GitHub Exploit DB Packet Storm
40 5 警告 oreilly WebSite
WebSite Pro 		oreillyのWebSite等の複数製品における不特定の脆弱性 New CWE-Other
その他 		CVE-1999-1180 2026-06-23 11:22 1999-02-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257061 9.8 CRITICAL
Network 		debian
redhat
mozilla 		debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
firefox_esr
thunderb… 		Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbit… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-5398 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257062 9.8 CRITICAL
Network 		debian
redhat
mozilla 		debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird 		A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird < 4… CWE-416
 Use After Free 		CVE-2017-5396 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257063 4.3 MEDIUM
Network 		mozilla firefox Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed corre… CWE-20
 Improper Input Validation  		CVE-2017-5395 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257064 8.8 HIGH
Network 		mozilla firefox A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScript events combined with fullscreen mode. Note: This issue… CWE-352
 Origin Validation Error 		CVE-2017-5394 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257065 6.1 MEDIUM
Network 		mozilla firefox The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions… CWE-79
Cross-site Scripting 		CVE-2017-5393 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257066 9.8 CRITICAL
Network 		mozilla firefox Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which leads to potentially exploitable crashes.… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-5392 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257067 9.8 CRITICAL
Network 		mozilla firefox Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potent… NVD-CWE-noinfo
CVE-2017-5391 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257068 6.1 MEDIUM
Network 		mozilla firefox WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. Thi… CWE-601
Open Redirect 		CVE-2017-5389 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257069 7.5 HIGH
Network 		mozilla firefox A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2017-5388 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
257070 3.3 LOW
Local 		mozilla firefox The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a "<track>" tag refers to a file that does not exist if the … CWE-538
 File and Directory Information Exposure 		CVE-2017-5387 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm