Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
971 5.3 警告
Network
VMware Spring Security VMwareのSpring Securityにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2026-41694 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
972 9.8 緊急
Network
VMware spring for graphql VMwareのspring for graphqlにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-41699 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
973 8.1 重要
Network
VMware spring for graphql VMwareのspring for graphqlにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-41700 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
974 7.5 重要
Network
VMware spring for graphql VMwareのspring for graphqlにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-41856 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
975 7.5 重要
Network
tdengine tdengine tdengineにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2026-42542 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
976 8.1 重要
Network
マイクロソフト Microsoft Teams Android 用の Microsoft Teams の情報漏えいの脆弱性 CWE-74
インジェクション
CVE-2026-42835 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
977 9.8 緊急
Network
QNAP Systems qumagie QNAP Systemsのqumagieにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-44083 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
978 7.5 重要
Network
axios project axios axios projectのaxiosにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-44486 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
979 7.5 重要
Network
axios project axios axios projectのaxiosにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
送信データへの重要な情報の挿入
CVE-2026-44487 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
980 7.5 重要
Network
axios project axios axios projectのaxiosにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44488 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259121 4.6 MEDIUM
Physics
apple iphone_os
watchos
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to by… NVD-CWE-noinfo
CVE-2017-2352 2024-11-21 12:23 2017-02-20 Show GitHub Exploit DB Packet Storm
259122 2.4 LOW
Physics
apple iphone_os An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock pr… CWE-20
 Improper Input Validation 
CVE-2017-2351 2024-11-21 12:23 2017-02-20 Show GitHub Exploit DB Packet Storm
259123 6.5 MEDIUM
Network
apple
webkitgtk
iphone_os
safari
tvos
webkitgtk\+
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allow… CWE-200
Information Exposure
CVE-2017-2350 2024-11-21 12:23 2017-02-20 Show GitHub Exploit DB Packet Storm
259124 6.5 MEDIUM
Local
linux linux_kernel The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service … CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2017-2596 2024-11-21 12:23 2017-02-6 Show GitHub Exploit DB Packet Storm
259125 8.4 HIGH
Local
linux linux_kernel The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a… NVD-CWE-noinfo
CVE-2017-2583 2024-11-21 12:23 2017-02-6 Show GitHub Exploit DB Packet Storm
259126 6.1 MEDIUM
Network
moodle moodle In Moodle 3.x, there is XSS in the assignment submission page. CWE-79
Cross-site Scripting
CVE-2017-2578 2024-11-21 12:23 2017-01-20 Show GitHub Exploit DB Packet Storm
259127 5.3 MEDIUM
Network
moodle moodle In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums. CWE-20
 Improper Input Validation 
CVE-2017-2576 2024-11-21 12:23 2017-01-20 Show GitHub Exploit DB Packet Storm
259128 7.1 HIGH
Local
linux linux_kernel arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application … CWE-200
CWE-416
Information Exposure
 Use After Free
CVE-2017-2584 2024-11-21 12:23 2017-01-15 Show GitHub Exploit DB Packet Storm
259129 4.7 MEDIUM
Network
zimbra zm-ajax A vulnerability has been found in Zimbra zm-ajax up to 8.8.1 and classified as problematic. Affected by this vulnerability is the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt… - CVE-2017-20188 2024-11-21 12:22 2024-01-3 Show GitHub Exploit DB Packet Storm
259130 6.1 MEDIUM
Network
share_on_diaspora_project share_on_diaspora A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/ur… - CVE-2017-20176 2024-11-21 12:22 2023-02-6 Show GitHub Exploit DB Packet Storm