Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
131691 9.8 緊急
Network
シスコシステムズ RV340W Dual WAN Gigabit Wireless-AC VPN Router ファームウェア
RV340 Dual WAN Gigabit VPN Router ファームウェア
RV345P Dual WAN …
Cisco Small Business RV シリーズルータにおけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2021-1473 2021-12-15 11:45 2021-04-7 Show GitHub Exploit DB Packet Storm
131692 4.3 警告
Network
シスコシステムズ Cisco WebEx Meetings Android 用 Cisco Webex Meetings における権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2021-1467 2021-12-15 11:45 2021-04-7 Show GitHub Exploit DB Packet Storm
131693 4.9 警告
Network
シスコシステムズ Cisco Unified Communications Manager Cisco Unified Communications Manager および Unified Communications Manager Session Management Edition におけるファイルおよびディレクトリ情報の漏えいに関する脆弱性 CWE-538
ファイルおよびディレクトリ情報の漏えい
CVE-2021-1406 2021-12-15 11:45 2021-04-7 Show GitHub Exploit DB Packet Storm
131694 9.8 緊急
Network
シスコシステムズ Cisco RV215W Wireless-N VPN Router ファームウェア
RV130 VPN Router ファームウェア
Cisco RV110W Wireless-N VPN Firewall ファームウェア
複数の Cisco Small Business RVルータにおけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2021-1459 2021-12-15 11:45 2021-04-7 Show GitHub Exploit DB Packet Storm
131695 7.8 重要
Local
ClamAV
シスコシステムズ
Cisco Immunet for Endpoints
ClamAV
Cisco AMP for Endpoints
複数の Cisco 製品における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2021-1386 2021-12-15 11:45 2021-04-7 Show GitHub Exploit DB Packet Storm
131696 7.2 重要
Network
Grav CMS Grav CMS Grav におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2021-29440 2021-12-15 11:21 2021-04-13 Show GitHub Exploit DB Packet Storm
131697 7.5 重要
Network
AccessAlly AccessAlly WordPress 用 AccessAlly プラグインにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2021-24226 2021-12-15 10:37 2021-03-26 Show GitHub Exploit DB Packet Storm
131698 5.5 警告
Local
tsMuxer project tsMuxer tsMuxer における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2021-26805 2021-12-15 10:36 2021-02-3 Show GitHub Exploit DB Packet Storm
131699 9.8 緊急
Network
TOBESOFT.CO.LTD Xplatform XPLATFORM における境界外書き込みに関する脆弱性 CWE-125
CWE-787
CVE-2020-7853 2021-12-15 10:29 2020-01-22 Show GitHub Exploit DB Packet Storm
131700 8.8 重要
Network
libp2p IPFS IPFS におけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ
CVE-2020-26283 2021-12-15 10:29 2020-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 5.7 MEDIUM
Network
splunk splunk
splunk_cloud_platform
In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… CWE-20
 Improper Input Validation 
CVE-2026-20255 2026-06-16 00:04 2026-06-11 Show GitHub Exploit DB Packet Storm
762 5.3 MEDIUM
Network
guzzlephp psr-7 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 contain improper Host header validation when parsing raw HTTP request messages and when deriving a serv… CWE-20
CWE-918
 Improper Input Validation 
Server-Side Request Forgery (SSRF) 
CVE-2026-48998 2026-06-15 23:52 2026-06-11 Show GitHub Exploit DB Packet Storm
763 5.3 MEDIUM
Network
guzzlephp psr-7 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not reject ASCII control characters, whitespace, or DEL in first-party URI host components. A vulne… CWE-20
CWE-93
CWE-113
 Improper Input Validation 
CRLF Injection
HTTP Response Splitting
CVE-2026-49214 2026-06-15 23:41 2026-06-11 Show GitHub Exploit DB Packet Storm
764 5.7 MEDIUM
Network
splunk splunk
splunk_cloud_platform
In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… CWE-20
 Improper Input Validation 
CVE-2026-20256 2026-06-15 23:33 2026-06-11 Show GitHub Exploit DB Packet Storm
765 5.5 MEDIUM
Local
apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system ter… CWE-284
Improper Access Control
CVE-2025-24165 2026-06-15 23:26 2026-06-12 Show GitHub Exploit DB Packet Storm
766 5.5 MEDIUM
Local
apple macos This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data. CWE-61
 UNIX Symbolic Link (Symlink) Following
CVE-2025-43278 2026-06-15 23:25 2026-06-12 Show GitHub Exploit DB Packet Storm
767 5.5 MEDIUM
Local
apple macos A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2025-46313 2026-06-15 23:24 2026-06-12 Show GitHub Exploit DB Packet Storm
768 5.4 MEDIUM
Network
microsoft exchange_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting
CVE-2026-47631 2026-06-15 23:19 2026-06-10 Show GitHub Exploit DB Packet Storm
769 5.3 MEDIUM
Network
- - The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax fallback for its datatables route, allowing unauthenticated visitors to retrieve… CWE-200
Information Exposure
CVE-2026-8385 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
770 8.8 HIGH
Network
- - Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2026-5242 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm