Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131291 6.1 警告
Network 		Jamovi Jamovi Jamovi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-28079 2021-12-24 17:21 2021-04-24 Show GitHub Exploit DB Packet Storm
131292 9.8 緊急
Network 		Manta Media safe-obj safe-obj における脆弱性 CWE-Other
その他 		CVE-2021-25928 2021-12-24 17:21 2021-04-26 Show GitHub Exploit DB Packet Storm
131293 9.8 緊急
Network 		マイクロソフト Microsoft 4K Wireless Display Adapter Microsoft 4K Wireless Display Adapter におけるリモートでコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2021-43899 2021-12-24 16:59 2021-12-14 Show GitHub Exploit DB Packet Storm
131294 7.4 重要
Network 		マイクロソフト Microsoft BizTalk ESB Toolkit Microsoft BizTalk ESB Toolkit におけるなりすまされる脆弱性 CWE-noinfo
情報不足 		CVE-2021-43892 2021-12-24 16:59 2021-12-14 Show GitHub Exploit DB Packet Storm
131295 7.8 重要
Local 		マイクロソフト Microsoft Excel
Microsoft Office
Microsoft Office Online Server
Microsoft 365 Apps 		複数の Microsoft 製品におけるリモートでコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2021-43256 2021-12-24 16:59 2021-12-14 Show GitHub Exploit DB Packet Storm
131296 5.5 警告
Local 		マイクロソフト Microsoft Office
Microsoft 365 Apps 		Microsoft 365 Apps および Office におけるなりすまされる脆弱性 CWE-noinfo
情報不足 		CVE-2021-43255 2021-12-24 16:59 2021-12-14 Show GitHub Exploit DB Packet Storm
131297 7.5 重要
Network 		pgsync project pgsync pgsync における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2021-31671 2021-12-24 16:47 2021-04-27 Show GitHub Exploit DB Packet Storm
131298 5.3 警告
Network 		Sonatype Inc. Nexus Repository Manager Sonatype Nexus Repository Manager におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2021-30635 2021-12-24 16:47 2021-04-22 Show GitHub Exploit DB Packet Storm
131299 9.8 緊急
Network 		Open Design Alliance Drawings SDK Open Design Alliance Drawings SDK における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2021-31784 2021-12-24 16:47 2021-04-26 Show GitHub Exploit DB Packet Storm
131300 7.5 重要
Network 		Piwigo LocalFilesEditor Piwigo 用 LocalFilesEditor エクステンションにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2021-31783 2021-12-24 16:47 2021-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 7.5 HIGH
Network 		- - Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers. New CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-57912 2026-06-27 01:17 2026-06-26 Show GitHub Exploit DB Packet Storm
202 7.5 HIGH
Network 		- - Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts. New CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-57913 2026-06-27 01:17 2026-06-26 Show GitHub Exploit DB Packet Storm
203 6.8 MEDIUM
Network 		- - Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with access to server logs or support packets to o… New CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-9699 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
204 - - - Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive … New - CVE-2026-5757 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
205 9.8 CRITICAL
Network 		- - An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking whe… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-57878 2026-06-27 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
206 8.6 HIGH
Network 		- - An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled inpu… New CWE-134
Use of Externally-Controlled Format String 		CVE-2026-57877 2026-06-27 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
207 7.5 HIGH
Network 		- - An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when pro… New CWE-787
 Out-of-bounds Write 		CVE-2026-57876 2026-06-27 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
208 7.5 HIGH
Network 		- - An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerabili… New CWE-476
 NULL Pointer Dereference 		CVE-2026-57875 2026-06-27 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
209 7.5 HIGH
Network 		- - An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking w… New CWE-120
Classic Buffer Overflow 		CVE-2026-57874 2026-06-27 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
210 7.5 HIGH
Network 		- - An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation o… New CWE-476
 NULL Pointer Dereference 		CVE-2026-57873 2026-06-27 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm