Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 681 | 7.5 |
重要
Network |
OpenSSL Project | OpenSSL | OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 |
CWE-125
境界外読み取り |
CVE-2026-9076 | 2026-06-17 15:38 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 682 | 8.1 |
重要
Network |
F5 Networks |
nginx open source NGINX plus |
F5 Networksのnginx open source等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-122
ヒープオーバーフロー |
CVE-2026-9256 | 2026-06-17 15:37 | 2026-05-22 | Show | GitHub Exploit DB Packet Storm |
| 683 | 4.3 |
警告
Network |
webpack.js | webpack-dev-server | webpackのwebpack-dev-serverにおける複数の脆弱性 |
CWE-346 CWE-441 |
CVE-2026-9595 | 2026-06-17 15:37 | 2026-06-15 | Show | GitHub Exploit DB Packet Storm |
| 684 | 8.8 |
重要
Network |
Trychroma | ChromaDB | TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-45830 | 2026-06-17 15:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 685 | 8.8 |
重要
Network |
Trychroma | ChromaDB | TrychromaのChromaDBにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-45831 | 2026-06-17 15:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 686 | 8.8 |
重要
Network |
Trychroma | ChromaDB | TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-45832 | 2026-06-17 15:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 687 | 8.8 |
重要
Network |
Trychroma | ChromaDB | TrychromaのChromaDBにおけるコードインジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2026-45833 | 2026-06-17 15:37 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 688 | 7.5 |
重要
Network |
OpenStack | OpenStack Ironic | OpenStackのOpenStack Ironicにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 |
CWE-770
制限またはスロットリング無しのリソースの割り当て |
CVE-2026-50589 | 2026-06-17 15:37 | 2026-06-5 | Show | GitHub Exploit DB Packet Storm |
| 689 | 7.5 |
重要
Network |
Dalibo SARL SCOP | PostgreSQL Anonymizer | Dalibo SARL SCOPのPostgreSQL AnonymizerにおけるSQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2026-11945 | 2026-06-17 15:37 | 2026-06-11 | Show | GitHub Exploit DB Packet Storm |
| 690 | 7.8 |
重要
Local |
Foxit | Foxit AI | FoxitのFoxit AIにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 |
CWE-829 CWE-829 |
CVE-2026-12057 | 2026-06-17 15:37 | 2026-06-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 22, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257331 | 9.8 |
CRITICAL
Network |
tcpdump | tcpdump | The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5341 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257332 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5205 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257333 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5204 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257334 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5203 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257335 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5202 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257336 | 7.5 |
HIGH
Network |
libarchive | libarchive | An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause… |
CWE-125
Out-of-bounds Read |
CVE-2017-5601 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257337 | 7.8 |
HIGH
Local |
paloaltonetworks | terminal_services_agent | Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation. |
CWE-787
Out-of-bounds Write |
CVE-2017-5329 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257338 | 7.5 |
HIGH
Network |
paloaltonetworks | terminal_services_agent | Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors. |
NVD-CWE-noinfo
|
CVE-2017-5328 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 257339 | 7.5 |
HIGH
Network |
eclinicalworks | patient_portal | An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST re… |
CWE-89
SQL Injection |
CVE-2017-5598 | 2024-11-21 12:27 | 2017-01-27 | Show | GitHub Exploit DB Packet Storm |
| 257340 | 7.5 |
HIGH
Network |
wireshark | wireshark | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packe… |
CWE-190
Integer Overflow or Wraparound |
CVE-2017-5597 | 2024-11-21 12:27 | 2017-01-26 | Show | GitHub Exploit DB Packet Storm |