|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 21, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 581 | 7.5 |
重要
Network |
Svelte project | devalue | Svelte projectのdevalueにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 |
CWE-770
制限またはスロットリング無しのリソースの割り当て |
CVE-2026-42570 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 582 | 6.1 |
警告
Network |
Svelte project | Svelte | Svelte projectのSvelteにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-42573 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 583 | 6.1 |
警告
Network |
Svelte project | Svelte | Svelte projectのSvelteにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-42599 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 584 | 7.8 |
重要
Local |
マイクロソフト |
Microsoft Windows 11 25h2 Microsoft Windows 11 26h1 Microsoft Windows 11 24h2 |
Windows 管理者保護のセキュリティ機能バイパスの脆弱性 |
CWE-284
不適切なアクセス制御 |
CVE-2026-42829 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 585 | 7 |
重要
Local |
マイクロソフト |
Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft&n… |
Windows Function Discovery Service (fdwsd.dll) の特権昇格の脆弱性 |
CWE-362 CWE-416 |
CVE-2026-42836 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 586 | 7.8 |
重要
Local |
マイクロソフト |
Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 11 26h1 Microsoft … |
Windows Projected File System の特権の昇格の脆弱性 |
CWE-125
境界外読み取り |
CVE-2026-42837 | 2026-06-12 14:53 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 587 | 9.6 |
緊急
Network |
flowiseai | flowise | flowiseaiのflowiseにおける複数の脆弱性 |
CWE-284 CWE-639 CWE-915 |
CVE-2026-42861 | 2026-06-12 14:52 | 2026-06-8 | Show | GitHub Exploit DB Packet Storm |
| 588 | 5 |
警告
Network |
flowiseai | flowise | flowiseaiのflowiseにおける複数の脆弱性 |
CWE-284 CWE-639 CWE-915 |
CVE-2026-42862 | 2026-06-12 14:52 | 2026-06-8 | Show | GitHub Exploit DB Packet Storm |
| 589 | 8.1 |
重要
Network |
flowiseai | flowise | flowiseaiのflowiseにおける複数の脆弱性 |
CWE-284 CWE-639 CWE-915 |
CVE-2026-42863 | 2026-06-12 14:52 | 2026-06-8 | Show | GitHub Exploit DB Packet Storm |
| 590 | 6.5 |
警告
Network |
マイクロソフト |
Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft&n… |
Windows Kerberos のサービス拒否の脆弱性 |
CWE-476
NULL ポインタデリファレンス |
CVE-2026-42903 | 2026-06-12 14:52 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 22, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257331 | 9.8 |
CRITICAL
Network |
tcpdump | tcpdump | The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5341 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257332 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5205 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257333 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5204 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257334 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5203 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257335 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5202 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257336 | 7.5 |
HIGH
Network |
libarchive | libarchive | An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause… |
CWE-125
Out-of-bounds Read |
CVE-2017-5601 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257337 | 7.8 |
HIGH
Local |
paloaltonetworks | terminal_services_agent | Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation. |
CWE-787
Out-of-bounds Write |
CVE-2017-5329 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257338 | 7.5 |
HIGH
Network |
paloaltonetworks | terminal_services_agent | Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors. |
NVD-CWE-noinfo
|
CVE-2017-5328 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257339 | 7.5 |
HIGH
Network |
eclinicalworks | patient_portal | An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST re… |
CWE-89
SQL Injection |
CVE-2017-5598 | 2024-11-21 12:27 | 2017-01-27 | Show | GitHub Exploit DB Packet Storm |
| 257340 | 7.5 |
HIGH
Network |
wireshark | wireshark | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packe… |
CWE-190
Integer Overflow or Wraparound |
CVE-2017-5597 | 2024-11-21 12:27 | 2017-01-26 | Show | GitHub Exploit DB Packet Storm |