Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
621 9.8 緊急
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
DHCP クライアント サービスのリモートでコードが実行される脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-44815 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
622 5.3 警告
Network
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-45031 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
623 6.5 警告
Adjacent
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-45160 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
624 8.8 重要
Local
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける複数の脆弱性 CWE-20
CWE-787
CWE-787
CVE-2026-45328 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
625 6.5 警告
Local
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける複数の脆弱性 CWE-125
CWE-20
CWE-200
CVE-2026-45329 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
626 5.3 警告
Network
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-193
CVE-2026-45358 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
627 5.7 警告
Local
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-125
CWE-129
CVE-2026-45359 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
628 5.4 警告
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45468 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
629 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows プログラム互換性アシスタント サービスの特権昇格の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態
CVE-2026-45487 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
630 7.5 重要
Network
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-45541 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257361 5.9 MEDIUM
Network
fiberhome fengine_s5800_firmware An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly… CWE-400
 Uncontrolled Resource Consumption
CVE-2017-5544 2024-11-21 12:27 2017-01-23 Show GitHub Exploit DB Packet Storm
257362 8.8 HIGH
Network
metalgenix genixcms The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files wit… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2017-5520 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257363 9.8 CRITICAL
Network
metalgenix genixcms SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2017-5519 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257364 7.4 HIGH
Network
metalgenix genixcms The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2017-5518 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257365 9.8 CRITICAL
Network
metalgenix genixcms SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter. CWE-89
SQL Injection
CVE-2017-5517 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257366 6.1 MEDIUM
Network
metalgenix genixcms Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters. CWE-79
Cross-site Scripting
CVE-2017-5516 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257367 5.4 MEDIUM
Network
metalgenix genixcms Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names. CWE-79
Cross-site Scripting
CVE-2017-5515 2024-11-21 12:27 2017-01-17 Show GitHub Exploit DB Packet Storm
257368 5.5 MEDIUM
Local
phpmailer_project phpmailer An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to… CWE-200
Information Exposure
CVE-2017-5223 2024-11-21 12:27 2017-01-16 Show GitHub Exploit DB Packet Storm
257369 5.4 MEDIUM
Network
b2evolution b2evolution Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (… CWE-79
Cross-site Scripting
CVE-2017-5494 2024-11-21 12:27 2017-01-16 Show GitHub Exploit DB Packet Storm
257370 8.1 HIGH
Network
b2evolution b2evolution Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to prov… CWE-22
Path Traversal
CVE-2017-5480 2024-11-21 12:27 2017-01-16 Show GitHub Exploit DB Packet Storm