Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131791 9.8 緊急
Network 		ShopXO ShopXO Shopxo における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2020-19778 2021-12-16 11:30 2020-08-13 Show GitHub Exploit DB Packet Storm
131792 8.8 重要
Network 		Fedora Project
Nextcloud		 Fedora
Nextcloud Desktop Client 		Nextcloud Desktop Client におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2021-22879 2021-12-16 11:30 2021-02-9 Show GitHub Exploit DB Packet Storm
131793 3.3 低
Local 		SUSE s390-tools SUSE Linux Enterprise Server 用 s390-tools における安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル 		CVE-2021-25316 2021-12-16 11:30 2021-02-25 Show GitHub Exploit DB Packet Storm
131794 9.8 緊急
Network 		QNAP Systems Surveillance Station QNAP NAS デバイスにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2021-28797 2021-12-16 11:30 2021-02-17 Show GitHub Exploit DB Packet Storm
131795 9.8 緊急
Network 		Facebook Thrift Facebook Thrift における無効なポインタや参照の解放に関する脆弱性 CWE-763
無効なポインタや参照の解放 		CVE-2021-24028 2021-12-16 11:30 2021-02-19 Show GitHub Exploit DB Packet Storm
131796 9.8 緊急
Network 		Motorola Solutions, Inc MH702x ファームウェア Motorola MH702x デバイスにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2021-3460 2021-12-16 11:30 2021-04-13 Show GitHub Exploit DB Packet Storm
131797 4.9 警告
Network 		Perforce Software Helix ALM Perforce Helix ALM における DTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 CWE-776
DTD の再帰的なエンティティ参照の不適切な制限 		CVE-2021-28973 2021-12-16 11:23 2021-04-1 Show GitHub Exploit DB Packet Storm
131798 9.8 緊急
Network 		OpenClinic GA OpenClinic GA OpenClinic GA におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2020-27227 2021-12-16 11:10 2020-10-19 Show GitHub Exploit DB Packet Storm
131799 7.5 重要
Network 		ASUSTeK Computer Inc.
Asuswrt-Merlin firmware project		 RT-AX68U ファームウェア
RT-AX86U ファームウェア
RT-AX58U ファームウェア
RT-AX82U ファームウェア
RT-AX55 ファームウェア
ZenWiFi AX (XT8) ファームウェア
RT-AX56U ファームウェア
RT-AX88… 		複数の ASUS ルータ製品のファームウェアにおける過度なイテレーションの脆弱性 CWE-834
過度なイテレーション 		CVE-2021-3128 2021-12-16 11:10 2021-04-12 Show GitHub Exploit DB Packet Storm
131800 6.5 警告
Network 		GitLab.org GitLab GitLab におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2021-22190 2021-12-16 11:10 2021-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
911 7.0 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize a search structure,… - CVE-2026-46299 2026-06-14 15:16 2026-06-9 Show GitHub Exploit DB Packet Storm
912 9.8 CRITICAL
Network 		- - In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fix bugs in extract_iter_to_sg()", v3. Fix bugs in … - CVE-2026-46289 2026-06-14 15:16 2026-06-9 Show GitHub Exploit DB Packet Storm
913 8.4 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_changeset() The variable 'parent' is assigned the value of 'nchangeset' earlier i… - CVE-2026-46288 2026-06-14 15:16 2026-06-9 Show GitHub Exploit DB Packet Storm
914 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file close to avoid use-after-free Patch series "Minor hmm_test fixes and cleanups". Two bu… - CVE-2026-46280 2026-06-14 15:16 2026-06-9 Show GitHub Exploit DB Packet Storm
915 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio after calling ->folio_free() The contents of a device folio can immediately change afte… - CVE-2026-46277 2026-06-14 15:16 2026-06-9 Show GitHub Exploit DB Packet Storm
916 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-After-Free (UAF) and Nul… - CVE-2026-46275 2026-06-14 15:16 2026-06-9 Show GitHub Exploit DB Packet Storm
917 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending() io_wq_remove_pending() needs to fix up wq->hash_tail[] if t… - CVE-2026-46274 2026-06-14 15:16 2026-06-9 Show GitHub Exploit DB Packet Storm
918 6.5 MEDIUM
Network 		gpac gpac A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-476
 NULL Pointer Dereference 		CVE-2025-55659 2026-06-14 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
919 7.5 HIGH
Network 		gpac gpac A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-476
 NULL Pointer Dereference 		CVE-2025-55657 2026-06-14 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
920 5.5 MEDIUM
Local 		gpac gpac A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-476
 NULL Pointer Dereference 		CVE-2025-55651 2026-06-14 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm