Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
91 8.1 重要
Network 		Apache Software Foundation Apache Doris-MCP-Server Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2025-66336 2026-06-29 11:21 2026-06-22 Show GitHub Exploit DB Packet Storm
92 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2025-71332 2026-06-29 11:21 2026-06-24 Show GitHub Exploit DB Packet Storm
93 7.8 重要
Local 		Matthieu Maitre Picklescan Matthieu MaitreのPicklescanにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-71348 2026-06-29 11:21 2026-06-21 Show GitHub Exploit DB Packet Storm
94 7.8 重要
Local 		Matthieu Maitre Picklescan Matthieu MaitreのPicklescanにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-71357 2026-06-29 11:21 2026-06-21 Show GitHub Exploit DB Packet Storm
95 7.8 重要
Local 		Matthieu Maitre Picklescan Matthieu MaitreのPicklescanにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-71378 2026-06-29 11:21 2026-06-21 Show GitHub Exploit DB Packet Storm
96 7.5 重要
Network 		vLLM vLLM vLLMにおける非効率的な正規表現の複雑さに関する脆弱性 New CWE-1333
非効率的な正規表現の複雑さ 		CVE-2025-71379 2026-06-29 11:21 2026-06-20 Show GitHub Exploit DB Packet Storm
97 6.5 警告
Network 		Artifex Software MuPDF Artifex SoftwareのMuPDFにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2025-71382 2026-06-29 11:21 2026-06-23 Show GitHub Exploit DB Packet Storm
98 3.8 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-0934 2026-06-29 11:21 2026-06-25 Show GitHub Exploit DB Packet Storm
99 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-10086 2026-06-29 11:21 2026-06-25 Show GitHub Exploit DB Packet Storm
100 10 緊急
Network 		langflow langflow langflowにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-10561 2026-06-29 11:21 2026-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190631 6.5 MEDIUM
Network 		ibm sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message … CWE-209
Information Exposure Through an Error Message 		CVE-2021-39033 2024-11-21 15:18 2022-04-20 Show GitHub Exploit DB Packet Storm
190632 5.4 MEDIUM
Network 		ibm curam_social_program_management IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended… CWE-79
Cross-site Scripting 		CVE-2021-39068 2024-11-21 15:18 2022-04-12 Show GitHub Exploit DB Packet Storm
190633 7.5 HIGH
Network 		ibm system_storage_ds8000_management_console_firmware IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-For… NVD-CWE-noinfo
CVE-2021-38930 2024-11-21 15:18 2022-04-12 Show GitHub Exploit DB Packet Storm
190634 7.5 HIGH
Network 		ibm system_storage_ds8000_management_console_firmware IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-For… NVD-CWE-noinfo
CVE-2021-38929 2024-11-21 15:18 2022-04-12 Show GitHub Exploit DB Packet Storm
190635 8.8 HIGH
Network 		easy-mock_project easy_mock easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code. NVD-CWE-noinfo
CVE-2021-38834 2024-11-21 15:18 2022-04-5 Show GitHub Exploit DB Packet Storm
190636 8.8 HIGH
Network 		atlassian confluence_server
confluence_data_center 		Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account on a Confluence Data Center instance to execute arbitrary Java code or run arbitrary system commands … CWE-94
Code Injection 		CVE-2021-39114 2024-11-21 15:18 2022-04-5 Show GitHub Exploit DB Packet Storm
190637 7.5 HIGH
Network 		tendacn ac10_firmware Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function. CWE-120
Classic Buffer Overflow 		CVE-2021-38772 2024-11-21 15:18 2022-03-24 Show GitHub Exploit DB Packet Storm
190638 6.8 MEDIUM
Network 		chamilo chamilo Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through… CWE-94
Code Injection 		CVE-2021-38745 2024-11-21 15:18 2022-03-22 Show GitHub Exploit DB Packet Storm
190639 4.9 MEDIUM
Network 		ibm business_automation_workflow
business_process_manager 		IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-For… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-39046 2024-11-21 15:18 2022-03-19 Show GitHub Exploit DB Packet Storm
190640 5.4 MEDIUM
Network 		ibm spectrum_copy_data_management IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2021-39055 2024-11-21 15:18 2022-03-15 Show GitHub Exploit DB Packet Storm