Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
651	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-46063	2026-06-17 15:39	2026-05-27	Show	GitHub Exploit DB Packet Storm

652	6.1	警告 Network	diagrams	drawio	diagramsのdrawioにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-46642	2026-06-17 15:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

653	7.2	重要 Network	MariaDB Corporation Ab.	MariaDB	MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-48163	2026-06-17 15:39	2026-06-12	Show	GitHub Exploit DB Packet Storm

654	7.2	重要 Network	MariaDB Corporation Ab.	MariaDB	MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-48165	2026-06-17 15:39	2026-06-12	Show	GitHub Exploit DB Packet Storm

655	7.8	重要 Local	レッドハット X.Org Foundation	X.Org X Server Red Hat Enterprise Linux xwayland	レッドハット等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-50264	2026-06-17 15:39	2026-06-5	Show	GitHub Exploit DB Packet Storm

656	7.5	重要 Network	Express.js	Multer	Express.jsのMulterにおける不完全なクリーンアップに関する脆弱性	CWE-459 不完全なクリーンアップ	CVE-2026-5038	2026-06-17 15:39	2026-06-15	Show	GitHub Exploit DB Packet Storm

657	7.5	重要 Network	Express.js	Multer	Express.jsのMulterにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-5079	2026-06-17 15:39	2026-06-15	Show	GitHub Exploit DB Packet Storm

658	8.1	重要 Network	Zoom Video Communications, Inc.	Zoom Meeting SDK Zoom Workplace	Zoom Video Communications, Inc.のZoom Meeting SDK等の複数製品におけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性	CWE-939 カスタム URL スキームのハンドラの不適切な認可	CVE-2026-53408	2026-06-17 15:39	2026-06-12	Show	GitHub Exploit DB Packet Storm

659	6.6	警告 Local	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-53820	2026-06-17 15:39	2026-06-12	Show	GitHub Exploit DB Packet Storm

660	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-53821	2026-06-17 15:39	2026-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257261	5.5	MEDIUM Local	jasper_project	jasper	Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.	CWE-190 Integer Overflow or Wraparound	CVE-2017-5501	2024-11-21 12:27	2017-03-2	Show	GitHub Exploit DB Packet Storm

257262	5.5	MEDIUM Local	jasper_project	jasper	libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.	NVD-CWE-noinfo	CVE-2017-5500	2024-11-21 12:27	2017-03-2	Show	GitHub Exploit DB Packet Storm

257263	5.5	MEDIUM Local	jasper_project	jasper	Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.	CWE-190 Integer Overflow or Wraparound	CVE-2017-5499	2024-11-21 12:27	2017-03-2	Show	GitHub Exploit DB Packet Storm

257264	5.5	MEDIUM Local	jasper_project	jasper	libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.	NVD-CWE-noinfo	CVE-2017-5498	2024-11-21 12:27	2017-03-2	Show	GitHub Exploit DB Packet Storm

257265	9.8	CRITICAL Network	tigervnc	tigervnc	Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer bound…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5581	2024-11-21 12:27	2017-03-1	Show	GitHub Exploit DB Packet Storm

257266	9.8	CRITICAL Network	opentext	documentum_d2	OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons C…	CWE-20 Improper Input Validation	CVE-2017-5586	2024-11-21 12:27	2017-02-23	Show	GitHub Exploit DB Packet Storm

257267	8.8	HIGH Network	opentext	documentum_content_server	OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config option is false, does not properly restrict D…	CWE-74 Injection	CVE-2017-5585	2024-11-21 12:27	2017-02-23	Show	GitHub Exploit DB Packet Storm

257268	9.8	CRITICAL Network	dotcms	dotcms	An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesServlet performs string interpolation and direct SQL query e…	CWE-89 SQL Injection	CVE-2017-5344	2024-11-21 12:27	2017-02-17	Show	GitHub Exploit DB Packet Storm

257269	7.5	HIGH Network	fedoraproject gnu	fedora ed	regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free.	CWE-416 Use After Free	CVE-2017-5357	2024-11-21 12:27	2017-02-17	Show	GitHub Exploit DB Packet Storm

257270	8.9	HIGH Network	abbott	merlin\@home_firmware	An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). Th…	CWE-476 NULL Pointer Dereference	CVE-2017-5149	2024-11-21 12:27	2017-02-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed