Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
121 7.5 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-13283 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
122 7.5 重要
Network 		shell-quote project shell-quote shell-quote projectのshell-quoteにおけるアルゴリズムの複雑さに関する脆弱性 New CWE-407
アルゴリズムの複雑性 		CVE-2026-13311 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
123 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-1606 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
124 7.8 重要
Local 		gimp gimp gimpにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-2050 2026-06-29 11:20 2026-06-24 Show GitHub Exploit DB Packet Storm
125 5.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-2238 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
126 3.1 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-3176 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
127 8.8 重要
Network 		langflow langflow langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-33760 2026-06-29 11:20 2026-06-23 Show GitHub Exploit DB Packet Storm
128 9.8 緊急
Network 		デル Dell Wyse Management Suite デルのDell Wyse Management Suiteにおける信頼できるデータ受け入れ時の信頼できない無関係なデータの受け入れに関する脆弱性 New CWE-349
信頼できるデータ受け入れ時の信頼できない無関係なデータの受け入れ 		CVE-2026-41120 2026-06-29 11:20 2026-06-25 Show GitHub Exploit DB Packet Storm
129 5.4 警告
Network 		authlib authlib authlibにおけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト 		CVE-2026-41479 2026-06-29 11:20 2026-06-22 Show GitHub Exploit DB Packet Storm
130 6.5 警告
Network 		langflow langflow langflowにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-42867 2026-06-29 11:19 2026-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190651 6.1 MEDIUM
Network 		miraheze globalnewfiles GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column of the GlobalNewFiles special page is vulnerable t… - CVE-2021-39186 2024-11-21 15:18 2021-09-2 Show GitHub Exploit DB Packet Storm
190652 9.1 CRITICAL
Network 		typelevel http4s Http4s is a minimal, idiomatic Scala interface for HTTP services. In http4s versions 0.21.26 and prior, 0.22.0 through 0.22.2, 0.23.0, 0.23.1, and 1.0.0-M1 through 1.0.0-M24, the default CORS configu… - CVE-2021-39185 2024-11-21 15:18 2021-09-2 Show GitHub Exploit DB Packet Storm
190653 8.8 HIGH
Network 		frentix openolat OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared import XML file (e.g. a course) any class on the Java classpath can be instant… - CVE-2021-39181 2024-11-21 15:18 2021-09-2 Show GitHub Exploit DB Packet Storm
190654 5.4 MEDIUM
Network 		pimcore pimcore Pimcore is an open source data & experience management platform. Prior to version 10.1.2, an authenticated user could add XSS code as a value of custom metadata on assets. There is a patch for this i… CWE-79
Cross-site Scripting 		CVE-2021-39170 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190655 5.4 MEDIUM
Network 		pimcore pimcore Pimcore is an open source data & experience management platform. Prior to version 10.1.2, text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticate… - CVE-2021-39166 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190656 7.5 HIGH
Network 		atlassian atlasboard The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability. CWE-22
Path Traversal 		CVE-2021-39109 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190657 8.8 HIGH
Network 		frentix openolat OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.3.18, 15.5.3, and 16.0.0. Using a specially prepared ZIP file, it is possible t… CWE-22
Path Traversal 		CVE-2021-39180 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190658 7.5 HIGH
Network 		detect-character-encoding_project detect-character-encoding detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in d… - CVE-2021-39176 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190659 3.1 LOW
Network 		matrix
fedoraproject 		synapse
fedora 		Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) o… - CVE-2021-39164 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190660 7.8 HIGH
Local 		npmjs
oracle
siemens 		arborist
graalvm
sinec_infrastructure_network_services 		`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts … - CVE-2021-39135 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm