Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131341 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server
Microsoft Windows Server 2016
Microsoft Windows Ser… 		複数の Microsoft Windows 製品における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-43231 2021-12-24 14:24 2021-12-14 Show GitHub Exploit DB Packet Storm
131342 7.2 重要
Network 		TP-LINK Technologies TL-WR802N ファームウェア TP-Link 製 TL-WR802N V4 (JP) における OS コマンドインジェクション CWE-78
OSコマンド・インジェクション 		CVE-2021-4144 2021-12-24 14:17 2021-12-23 Show GitHub Exploit DB Packet Storm
131343 5.9 警告
Network 		jose project jose jose-node-esm-runtime における観測可能な不一致に関する脆弱性 CWE-203
セキュリティ関連の処理に対するレスポンスの違いに起因する情報漏えい 		CVE-2021-29443 2021-12-24 14:15 2021-04-15 Show GitHub Exploit DB Packet Storm
131344 6.1 警告
Network 		Slab Inc. Quill Slab Quill におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-3163 2021-12-24 13:57 2021-04-12 Show GitHub Exploit DB Packet Storm
131345 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server
Microsoft SharePoint Foundation 		Microsoft SharePoint におけるリモートでコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2021-42309 2021-12-24 12:23 2021-12-14 Show GitHub Exploit DB Packet Storm
131346 5.5 警告
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office 		Microsoft 365 Apps および Office における情報を公開される脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2021-42295 2021-12-24 12:23 2021-12-14 Show GitHub Exploit DB Packet Storm
131347 7.2 重要
Network 		マイクロソフト Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server
Microsoft SharePoint Foundation 		Microsoft SharePoint におけるリモートでコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2021-42294 2021-12-24 12:23 2021-12-14 Show GitHub Exploit DB Packet Storm
131348 7.5 重要
Network 		マイクロソフト Microsoft 365 Apps
Microsoft Office 		Microsoft 365 Apps および Office における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-42293 2021-12-24 12:23 2021-12-14 Show GitHub Exploit DB Packet Storm
131349 8.8 重要
Network 		マイクロソフト Microsoft Defender for IoT Microsoft Defender for IoT におけるリモートでコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2021-41365 2021-12-24 12:23 2021-12-14 Show GitHub Exploit DB Packet Storm
131350 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Window… 		複数の Microsoft Windows 製品における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-41333 2021-12-24 12:23 2021-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
371 6.5 MEDIUM
Network 		- - Charging station authentication identifiers are publicly accessible via web-based mapping platforms. New CWE-522
 Insufficiently Protected Credentials 		CVE-2026-44622 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
372 9.4 CRITICAL
Network 		- - WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensiti… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-40702 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
373 7.5 HIGH
Network 		- - A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted string. New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-38640 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
374 4.2 MEDIUM
Network 		- - The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Googl… New CWE-862
 Missing Authorization 		CVE-2026-2299 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
375 8.1 HIGH
Network 		- - vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability New CWE-129
 Improper Validation of Array Index 		CVE-2026-22879 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
376 - - - ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.35 in Java applications, allows an attacker to execute arbitrary code circumvent… New CWE-20
 Improper Input Validation  		CVE-2026-13006 2026-06-26 23:16 2026-06-24 Show GitHub Exploit DB Packet Storm
377 8.2 HIGH
Network 		- - Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-12473 2026-06-26 23:16 2026-06-26 Show GitHub Exploit DB Packet Storm
378 6.1 MEDIUM
Local 		- - A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted … New CWE-416
 Use After Free 		CVE-2025-60465 2026-06-26 23:16 2026-06-26 Show GitHub Exploit DB Packet Storm
379 7.8 HIGH
Local 		- - A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafte… New CWE-416
 Use After Free 		CVE-2025-60464 2026-06-26 23:16 2026-06-26 Show GitHub Exploit DB Packet Storm
380 7.8 HIGH
Local 		mmaitre314 picklescan picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that execut… New CWE-502
 Deserialization of Untrusted Data 		CVE-2025-71357 2026-06-26 23:14 2026-06-21 Show GitHub Exploit DB Packet Storm