Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
121 7.5 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-13283 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
122 7.5 重要
Network 		shell-quote project shell-quote shell-quote projectのshell-quoteにおけるアルゴリズムの複雑さに関する脆弱性 New CWE-407
アルゴリズムの複雑性 		CVE-2026-13311 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
123 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-1606 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
124 7.8 重要
Local 		gimp gimp gimpにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-2050 2026-06-29 11:20 2026-06-24 Show GitHub Exploit DB Packet Storm
125 5.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-2238 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
126 3.1 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-3176 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
127 8.8 重要
Network 		langflow langflow langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-33760 2026-06-29 11:20 2026-06-23 Show GitHub Exploit DB Packet Storm
128 9.8 緊急
Network 		デル Dell Wyse Management Suite デルのDell Wyse Management Suiteにおける信頼できるデータ受け入れ時の信頼できない無関係なデータの受け入れに関する脆弱性 New CWE-349
信頼できるデータ受け入れ時の信頼できない無関係なデータの受け入れ 		CVE-2026-41120 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
129 5.4 警告
Network 		authlib authlib authlibにおけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト 		CVE-2026-41479 2026-06-29 11:20 2026-06-22 Show GitHub Exploit DB Packet Storm
130 6.5 警告
Network 		langflow langflow langflowにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-42867 2026-06-29 11:19 2026-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190631 6.5 MEDIUM
Network 		ibm sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message … CWE-209
Information Exposure Through an Error Message 		CVE-2021-39033 2024-11-21 15:18 2022-04-20 Show GitHub Exploit DB Packet Storm
190632 5.4 MEDIUM
Network 		ibm curam_social_program_management IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended… CWE-79
Cross-site Scripting 		CVE-2021-39068 2024-11-21 15:18 2022-04-12 Show GitHub Exploit DB Packet Storm
190633 7.5 HIGH
Network 		ibm system_storage_ds8000_management_console_firmware IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-For… NVD-CWE-noinfo
CVE-2021-38930 2024-11-21 15:18 2022-04-12 Show GitHub Exploit DB Packet Storm
190634 7.5 HIGH
Network 		ibm system_storage_ds8000_management_console_firmware IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-For… NVD-CWE-noinfo
CVE-2021-38929 2024-11-21 15:18 2022-04-12 Show GitHub Exploit DB Packet Storm
190635 8.8 HIGH
Network 		easy-mock_project easy_mock easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code. NVD-CWE-noinfo
CVE-2021-38834 2024-11-21 15:18 2022-04-5 Show GitHub Exploit DB Packet Storm
190636 8.8 HIGH
Network 		atlassian confluence_server
confluence_data_center 		Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account on a Confluence Data Center instance to execute arbitrary Java code or run arbitrary system commands … CWE-94
Code Injection 		CVE-2021-39114 2024-11-21 15:18 2022-04-5 Show GitHub Exploit DB Packet Storm
190637 7.5 HIGH
Network 		tendacn ac10_firmware Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function. CWE-120
Classic Buffer Overflow 		CVE-2021-38772 2024-11-21 15:18 2022-03-24 Show GitHub Exploit DB Packet Storm
190638 6.8 MEDIUM
Network 		chamilo chamilo Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through… CWE-94
Code Injection 		CVE-2021-38745 2024-11-21 15:18 2022-03-22 Show GitHub Exploit DB Packet Storm
190639 4.9 MEDIUM
Network 		ibm business_automation_workflow
business_process_manager 		IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-For… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-39046 2024-11-21 15:18 2022-03-19 Show GitHub Exploit DB Packet Storm
190640 5.4 MEDIUM
Network 		ibm spectrum_copy_data_management IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2021-39055 2024-11-21 15:18 2022-03-15 Show GitHub Exploit DB Packet Storm