Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
601 6.8 警告
Physics 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2012
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Wind… 		Windows BitLocker セキュリティ機能バイパスの脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-50507 2026-06-11 16:15 2026-06-9 Show GitHub Exploit DB Packet Storm
602 9.1 緊急
Network 		BINARY DataDog::DogStatsd BINARYのDataDog::DogStatsdにおける複数の脆弱性 CWE-150
CWE-93
CVE-2026-46719
CVE-2026-46720
CVE-2026-46741
CVE-2026-9270 		2026-06-11 16:15 2026-06-5 Show GitHub Exploit DB Packet Storm
603 9.8 緊急
Network 		BINARY DataDog::DogStatsd BINARYのDataDog::DogStatsdにおける複数の脆弱性 CWE-150
CWE-93
CVE-2026-11362
CVE-2026-46719
CVE-2026-46720
CVE-2026-46741 		2026-06-11 16:15 2026-06-5 Show GitHub Exploit DB Packet Storm
604 7.8 重要
Local 		Synology Inc. Active Backup for Business Recovery Media Creator Synology Inc.のActive Backup for Business Recovery Media Creatorにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2022-49036 2026-06-11 16:14 2026-06-3 Show GitHub Exploit DB Packet Storm
605 5.5 警告
Local 		cilium eBPF ciliumのeBPFにおける複数の脆弱性 CWE-189
CWE-190
CVE-2026-10722 2026-06-11 16:14 2026-06-3 Show GitHub Exploit DB Packet Storm
606 7.5 重要
Network 		CRUX Protocol::HTTP2 CRUXのProtocol::HTTP2における高圧縮データの処理 (データ増幅)に関する脆弱性 CWE-409
高圧縮データの不適切な処理 (データ増幅) 		CVE-2026-10725 2026-06-11 16:14 2026-06-6 Show GitHub Exploit DB Packet Storm
607 6.1 警告
Network 		HCL Technologies Limited Digital Experience Compose
digital experience 		HCL Technologies Limitedのdigital experience等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21825 2026-06-11 16:14 2026-06-5 Show GitHub Exploit DB Packet Storm
608 6.1 警告
Network 		HCL Technologies Limited Digital Experience Compose
digital experience 		HCL Technologies Limitedのdigital experience等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-21826 2026-06-11 16:14 2026-06-5 Show GitHub Exploit DB Packet Storm
609 8.8 重要
Network 		HCL Technologies Limited Digital Experience Compose
digital experience 		HCL Technologies Limitedのdigital experience等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-21837 2026-06-11 16:14 2026-06-5 Show GitHub Exploit DB Packet Storm
610 5.3 警告
Local 		LMSYS Org SGLang LMSYS OrgのSGLangにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-10775 2026-06-11 16:14 2026-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258631 7.5 HIGH
Network 		phoenixcoin_project phoenixcoin A vulnerability was found in ghostlander Phoenixcoin. It has been classified as problematic. Affected is the function CTxMemPool::accept of the file src/main.cpp. The manipulation leads to denial of … - CVE-2017-20154 2024-11-21 12:22 2022-12-31 Show GitHub Exploit DB Packet Storm
258632 9.8 CRITICAL
Network 		itextpdf rups A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xm… - CVE-2017-20151 2024-11-21 12:22 2022-12-30 Show GitHub Exploit DB Packet Storm
258633 6.1 MEDIUM
Network 		imageserve_project imageserve A vulnerability has been found in aerouk imageserve and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument REQUEST_URI leads to cr… - CVE-2017-20153 2024-11-21 12:22 2022-12-30 Show GitHub Exploit DB Packet Storm
258634 7.5 HIGH
Network 		imageserve_project imageserve A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of … - CVE-2017-20152 2024-11-21 12:22 2022-12-30 Show GitHub Exploit DB Packet Storm
258635 8.8 HIGH
Network 		challenge_website_project challenge_website A vulnerability was found in challenge website. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The name of the patch is f1644b1d35… CWE-89
SQL Injection 		CVE-2017-20150 2024-11-21 12:22 2022-12-29 Show GitHub Exploit DB Packet Storm
258636 9.8 CRITICAL
Network 		gorillatoolkit handlers Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of th… CWE-346
 Origin Validation Error 		CVE-2017-20146 2024-11-21 12:22 2022-12-28 Show GitHub Exploit DB Packet Storm
258637 9.8 CRITICAL
Network 		mikrotik routeros The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sen… CWE-787
 Out-of-bounds Write 		CVE-2017-20149 2024-11-21 12:22 2022-10-15 Show GitHub Exploit DB Packet Storm
258638 9.8 CRITICAL
Network 		debian logcheck In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls. NVD-CWE-noinfo
CVE-2017-20148 2024-11-21 12:22 2022-09-21 Show GitHub Exploit DB Packet Storm
258639 6.5 MEDIUM
Network 		smokeping smokeping In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping … NVD-CWE-noinfo
CVE-2017-20147 2024-11-21 12:22 2022-09-21 Show GitHub Exploit DB Packet Storm
258640 9.8 CRITICAL
Network 		tecrail responsive_filemanager A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been… CWE-22
Path Traversal 		CVE-2017-20145 2024-11-21 12:22 2022-07-25 Show GitHub Exploit DB Packet Storm