Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
631 5.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御
CVE-2026-11669 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
632 8.3 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-11672 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
633 8.3 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-11676 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
634 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-11681 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
635 8.3 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-11682 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
636 8.1 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-11689 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
637 7.8 重要
Local
シスコシステムズ Cisco SD-WAN vSmart Controller シスコシステムズのCisco Catalyst SD-WAN Manager等の複数製品におけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ
CVE-2026-20245 2026-06-11 16:13 2026-06-4 Show GitHub Exploit DB Packet Storm
638 6.1 警告
Network
Apache Software Foundation answer Apache Software Foundationのanswerにおける代替 XSS 構文の不適切な無効化に関する脆弱性 CWE-87
代替 XSS 構文の不適切な無効化
CVE-2026-25688 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
639 6.1 警告
Network
Apache Software Foundation answer Apache Software Foundationのanswerにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい
CVE-2026-25699 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
640 6.5 警告
Network
Apache Software Foundation answer Apache Software Foundationのanswerにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2026-33582 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258651 7.5 HIGH
Network
apple safari
iphone_os
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the addr… NVD-CWE-noinfo
CVE-2017-2376 2024-11-21 12:23 2017-04-2 Show GitHub Exploit DB Packet Storm
258652 6.5 MEDIUM
Network
apple safari
iphone_os
tvos
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remo… NVD-CWE-noinfo
CVE-2017-2367 2024-11-21 12:23 2017-04-2 Show GitHub Exploit DB Packet Storm
258653 7.8 HIGH
Local
linux linux_kernel The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value fo… CWE-476
 NULL Pointer Dereference
CVE-2017-2647 2024-11-21 12:23 2017-03-31 Show GitHub Exploit DB Packet Storm
258654 8.8 HIGH
Network
siemens ruggedcom_rox_i Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration… CWE-287
Improper Authentication
CVE-2017-2689 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
258655 8.8 HIGH
Network
siemens ruggedcom_rox_i The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the target… CWE-352
 Origin Validation Error
CVE-2017-2688 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
258656 6.1 MEDIUM
Network
siemens ruggedcom_rox_i Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induc… CWE-79
Cross-site Scripting
CVE-2017-2687 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
258657 6.5 MEDIUM
Network
siemens ruggedcom_rox_i Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive informat… CWE-200
Information Exposure
CVE-2017-2686 2024-11-21 12:23 2017-03-29 Show GitHub Exploit DB Packet Storm
258658 6.1 MEDIUM
Network
moodle moodle In Moodle 3.x, XSS can occur via attachments to evidence of prior learning. CWE-79
Cross-site Scripting
CVE-2017-2645 2024-11-21 12:23 2017-03-27 Show GitHub Exploit DB Packet Storm
258659 6.1 MEDIUM
Network
moodle moodle In Moodle 3.x, XSS can occur via evidence of prior learning. CWE-79
Cross-site Scripting
CVE-2017-2644 2024-11-21 12:23 2017-03-27 Show GitHub Exploit DB Packet Storm
258660 5.3 MEDIUM
Network
moodle moodle In Moodle 3.2.x, global search displays user names for unauthenticated users. CWE-200
Information Exposure
CVE-2017-2643 2024-11-21 12:23 2017-03-27 Show GitHub Exploit DB Packet Storm