Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131731 7.8 重要
Local 		Canonical Ubuntu Ubuntu Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
CWE-415
CVE-2021-3492 2021-12-17 12:15 2021-04-12 Show GitHub Exploit DB Packet Storm
131732 7.8 重要
Local 		Canonical Ubuntu Ubuntu Kernel における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2021-3493 2021-12-17 12:13 2021-04-15 Show GitHub Exploit DB Packet Storm
131733 6.5 警告
Network 		Curveball a12n-server a12n-server における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2021-29452 2021-12-17 12:13 2021-04-16 Show GitHub Exploit DB Packet Storm
131734 9.1 緊急
Network 		ManyDesigns Portofino Portofino におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2021-29451 2021-12-17 12:13 2021-04-2 Show GitHub Exploit DB Packet Storm
131735 8.8 重要
Network 		Mendix Mendix Mendix アプリケーションにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2021-27394 2021-12-17 12:13 2021-04-14 Show GitHub Exploit DB Packet Storm
131736 7.8 重要
Local 		Google Bazel vscode-bazel における誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2021-22539 2021-12-17 12:13 2021-04-15 Show GitHub Exploit DB Packet Storm
131737 6.1 警告
Network 		QNAP Systems QNAP QTS QTS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-19942 2021-12-17 12:13 2018-12-7 Show GitHub Exploit DB Packet Storm
131738 5.9 警告
Network 		jose project jose jose-node-cjs-runtime における観測可能な不一致に関する脆弱性 CWE-203
セキュリティ関連の処理に対するレスポンスの違いに起因する情報漏えい 		CVE-2021-29446 2021-12-17 12:13 2021-04-15 Show GitHub Exploit DB Packet Storm
131739 6.5 警告
Network 		Matrix
Fedora Project		 Synapse
Fedora 		Synapse における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2021-21394 2021-12-17 12:12 2021-02-9 Show GitHub Exploit DB Packet Storm
131740 6.5 警告
Network 		MediaWiki MediaWiki MediaWiki における引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2021-31553 2021-12-17 12:05 2021-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
881 7.5 HIGH
Network 		- - Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the 3DES-ECB encryption New CWE-200
Information Exposure 		CVE-2026-37454 2026-06-27 00:16 2026-06-26 Show GitHub Exploit DB Packet Storm
882 7.5 HIGH
Network 		- - Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe New CWE-200
Information Exposure 		CVE-2026-37453 2026-06-27 00:16 2026-06-26 Show GitHub Exploit DB Packet Storm
883 7.5 HIGH
Network 		- - Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSIAPService.exe component New CWE-200
Information Exposure 		CVE-2026-37452 2026-06-27 00:16 2026-06-26 Show GitHub Exploit DB Packet Storm
884 7.7 HIGH
Local 		- - GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/search_products.php. This vulnerability … New CWE-89
SQL Injection 		CVE-2026-37149 2026-06-27 00:16 2026-06-26 Show GitHub Exploit DB Packet Storm
885 - - - FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, a query-construction flaw in client list endpoints allowed authenticated clients to bypass tenant… New CWE-863
 Incorrect Authorization 		CVE-2026-23513 2026-06-27 00:16 2026-06-24 Show GitHub Exploit DB Packet Storm
886 6.5 MEDIUM
Network 		- - By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to … New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-57914 2026-06-26 23:51 2026-06-26 Show GitHub Exploit DB Packet Storm
887 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.6, from 1.0.0 before 1.3.6. User… New CWE-22
Path Traversal 		CVE-2025-55017 2026-06-26 23:51 2026-06-26 Show GitHub Exploit DB Packet Storm
888 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.6, from 2.0.0 before 2.0.7. User… New CWE-22
Path Traversal 		CVE-2025-64152 2026-06-26 23:51 2026-06-26 Show GitHub Exploit DB Packet Storm
889 7.8 HIGH
Local 		mmaitre314 picklescan picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary… New CWE-502
 Deserialization of Untrusted Data 		CVE-2025-71348 2026-06-26 23:46 2026-06-21 Show GitHub Exploit DB Packet Storm
890 7.5 HIGH
Network 		- - Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES keys and initialization vectors. This allo… New CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-9220 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm