Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
31 5 警告
Network
flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 New CWE-284
CWE-639
CWE-915
CVE-2026-42862 2026-06-12 14:52 2026-06-8 Show GitHub Exploit DB Packet Storm
32 8.1 重要
Network
flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 New CWE-284
CWE-639
CWE-915
CVE-2026-42863 2026-06-12 14:52 2026-06-8 Show GitHub Exploit DB Packet Storm
33 6.5 警告
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows Kerberos のサービス拒否の脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-42903 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
34 9.6 緊急
Adjacent
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows TCP/IP の特権昇格の脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-42904 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
35 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-42905 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
36 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows シェルの情報漏えいの脆弱性 New CWE-200
情報漏えい
CVE-2026-42906 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
37 6.5 警告
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows シェルの情報漏えいの脆弱性 New CWE-200
情報漏えい
CVE-2026-42907 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
38 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Windows ホットパッチ監視サービスの特権昇格の脆弱性 New CWE-787
境界外書き込み
CVE-2026-42910 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
39 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-42911 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
40 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows テレフォニー サービスの特権昇格の脆弱性 New CWE-362
競合状態
CVE-2026-42912 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258211 6.1 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function. CWE-79
Cross-site Scripting
CVE-2017-2257 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258212 5.4 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo". CWE-79
Cross-site Scripting
CVE-2017-2256 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258213 5.4 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space". CWE-79
Cross-site Scripting
CVE-2017-2255 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258214 4.9 MEDIUM
Network
cybozu garoon Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input CWE-20
 Improper Input Validation 
CVE-2017-2254 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258215 7.8 HIGH
Local
ntt flets_setsuzoku_tool Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path
CVE-2017-2242 2024-11-21 12:23 2017-08-29 Show GitHub Exploit DB Packet Storm
258216 7.8 HIGH
Local
kddi qua_station_firmware Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path
CVE-2017-2289 2024-11-21 12:23 2017-08-18 Show GitHub Exploit DB Packet Storm
258217 7.8 HIGH
Local
enecho.meti teikihoukokusho_sakuseishien_tool Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path
CVE-2017-2228 2024-11-21 12:23 2017-08-18 Show GitHub Exploit DB Packet Storm
258218 7.8 HIGH
Local
baidu baidu_ime Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path
CVE-2017-2221 2024-11-21 12:23 2017-08-5 Show GitHub Exploit DB Packet Storm
258219 7.8 HIGH
Local
lhaforge_project lhaforge Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-427
 Uncontrolled Search Path Element
CVE-2017-2288 2024-11-21 12:23 2017-08-3 Show GitHub Exploit DB Packet Storm
258220 7.8 HIGH
Local
sony nfc_port_software_remover Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-427
 Uncontrolled Search Path Element
CVE-2017-2287 2024-11-21 12:23 2017-08-3 Show GitHub Exploit DB Packet Storm