Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
601 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows テレフォニー サーバーの情報漏えいの脆弱性 CWE-125
境界外読み取り 		CVE-2026-42968 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
602 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows プッシュ通知の情報漏えいの脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-42969 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
603 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows プッシュ通知の情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-42970 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
604 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows プッシュ通知の情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-42971 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
605 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft … 		Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-42979 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
606 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		NT OS カーネルの特権の昇格の脆弱性 CWE-122
CWE-191
CVE-2026-42980 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
607 8.1 重要
Network 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows パフォーマンス モニターのリモート コード実行に対する脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-42981 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
608 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft … 		Windows DWM Core ライブラリの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-42983 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
609 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Microsoft Graphics コンポーネントの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-42986 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
610 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microso… 		Windows 展開サービス (WDS) のリモート コード実行 CWE-416
解放済みメモリの使用 		CVE-2026-42987 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259081 8.8 HIGH
Network 		apple safari
iphone_os 		An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attack… CWE-20
 Improper Input Validation  		CVE-2017-2378 2024-11-21 12:23 2017-04-2 Show GitHub Exploit DB Packet Storm
259082 7.5 HIGH
Network 		apple safari
iphone_os 		An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-2377 2024-11-21 12:23 2017-04-2 Show GitHub Exploit DB Packet Storm
259083 7.5 HIGH
Network 		apple safari
iphone_os 		An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the addr… NVD-CWE-noinfo
CVE-2017-2376 2024-11-21 12:23 2017-04-2 Show GitHub Exploit DB Packet Storm
259084 6.5 MEDIUM
Network 		apple safari
iphone_os
tvos 		An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remo… NVD-CWE-noinfo
CVE-2017-2367 2024-11-21 12:23 2017-04-2 Show GitHub Exploit DB Packet Storm
259085 7.8 HIGH
Local 		linux linux_kernel The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value fo… CWE-476
 NULL Pointer Dereference 		CVE-2017-2647 2024-11-21 12:23 2017-03-31 Show GitHub Exploit DB Packet Storm
259086 8.8 HIGH
Network 		siemens ruggedcom_rox_i Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration… CWE-287
Improper Authentication 		CVE-2017-2689 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
259087 8.8 HIGH
Network 		siemens ruggedcom_rox_i The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the target… CWE-352
 Origin Validation Error 		CVE-2017-2688 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
259088 6.1 MEDIUM
Network 		siemens ruggedcom_rox_i Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induc… CWE-79
Cross-site Scripting 		CVE-2017-2687 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
259089 6.5 MEDIUM
Network 		siemens ruggedcom_rox_i Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive informat… CWE-200
Information Exposure 		CVE-2017-2686 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
259090 6.1 MEDIUM
Network 		moodle moodle In Moodle 3.x, XSS can occur via attachments to evidence of prior learning. CWE-79
Cross-site Scripting 		CVE-2017-2645 2024-11-21 12:23 2017-03-27 Show GitHub Exploit DB Packet Storm