Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
41	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-12026	2026-06-16 13:39	2026-06-11	Show	GitHub Exploit DB Packet Storm

42	8.8	重要 Network	Splunk	Splunk Splunk Secure Gateway splunk cloud platform	SplunkのSplunk等の複数製品における信頼できないデータのデシリアライゼーションに関する脆弱性 New	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-20251	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

43	7.6	重要 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 New	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-20252	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

44	9.8	緊急 Network	Splunk	Splunk	Splunkにおける重要な機能に対する認証の欠如に関する脆弱性 New	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-20253	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

45	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20254	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

46	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20255	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

47	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20256	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

48	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20257	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

49	5.4	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-20258	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

50	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2026-22893	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258571	9.8	CRITICAL Network	apache	camel	Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.	CWE-502 Deserialization of Untrusted Data	CVE-2017-3159	2024-11-21 12:24	2017-03-8	Show	GitHub Exploit DB Packet Storm

258572	9.8	CRITICAL Network	justsystems	ichitaro	When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-2790	2024-11-21 12:24	2017-02-25	Show	GitHub Exploit DB Packet Storm

258573	7.8	HIGH Local	justsystems	ichitaro	JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-2791	2024-11-21 12:24	2017-02-25	Show	GitHub Exploit DB Packet Storm

258574	9.8	CRITICAL Network	justsystems	ichitaro	When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-2789	2024-11-21 12:24	2017-02-25	Show	GitHub Exploit DB Packet Storm

258575	8.8	HIGH Network	adobe	flash_player flash_player_desktop_runtime	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.	CWE-787 Out-of-bounds Write	CVE-2017-2996	2024-11-21 12:24	2017-02-15	Show	GitHub Exploit DB Packet Storm

258576	8.8	HIGH Network	adobe	flash_player flash_player_desktop_runtime	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.	CWE-843 Type Confusion	CVE-2017-2995	2024-11-21 12:24	2017-02-15	Show	GitHub Exploit DB Packet Storm

258577	8.8	HIGH Network	adobe	flash_player flash_player_desktop_runtime	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.	CWE-416 Use After Free	CVE-2017-2994	2024-11-21 12:24	2017-02-15	Show	GitHub Exploit DB Packet Storm

258578	8.8	HIGH Network	adobe	flash_player flash_player_desktop_runtime	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.	CWE-416 Use After Free	CVE-2017-2993	2024-11-21 12:24	2017-02-15	Show	GitHub Exploit DB Packet Storm

258579	8.8	HIGH Network	adobe	flash_player flash_player_desktop_runtime	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution.	CWE-787 Out-of-bounds Write	CVE-2017-2992	2024-11-21 12:24	2017-02-15	Show	GitHub Exploit DB Packet Storm

258580	8.8	HIGH Network	adobe	flash_player flash_player_desktop_runtime	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary co…	CWE-787 Out-of-bounds Write	CVE-2017-2991	2024-11-21 12:24	2017-02-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed