Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
131851 6.1 警告
Network
FecMall FecMall yii2_fecshop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2020-22808 2021-12-22 18:03 2020-05-26 Show GitHub Exploit DB Packet Storm
131852 9.8 緊急
Network
Vtiger Vtiger CRM vtiger crm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2020-22807 2021-12-22 18:03 2020-04-10 Show GitHub Exploit DB Packet Storm
131853 9.8 緊急
Network
Sebastian Hildebrandt systeminformation systeminformation における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2021-21388 2021-12-22 18:03 2021-03-15 Show GitHub Exploit DB Packet Storm
131854 7.5 重要
Network
シスコシステムズ Cisco Adaptive Security Appliance ソフトウェア
Cisco Firepower Threat Defense ソフトウェア
Cisco Adaptive Security Appliance および Firepower Threat Defense ソフトウェアにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2021-1504 2021-12-22 18:03 2021-04-28 Show GitHub Exploit DB Packet Storm
131855 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. G1 ファームウェア
G3 ファームウェア
Tenda G1 および G3 ルータのファームウェアにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2021-27692 2021-12-22 17:59 2021-02-23 Show GitHub Exploit DB Packet Storm
131856 7.5 重要
Network
HashiCorp Vault HashiCorp Vault および Vault Enterprise Cassandra integrations における証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2021-27400 2021-12-22 17:58 2021-04-21 Show GitHub Exploit DB Packet Storm
131857 6.5 警告
Network
FusionAuth fusionauth-samlv2 FusionAuth fusionauth-samlv2 における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2021-27736 2021-12-22 17:58 2021-02-7 Show GitHub Exploit DB Packet Storm
131858 7.8 重要
Local
Matthias Wandel jhead jhead における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2021-3496 2021-12-22 17:58 2021-04-13 Show GitHub Exploit DB Packet Storm
131859 8.1 重要
Network
チェック・ポイント・ソフトウェア・テクノロジーズ Identity Agent Check Point Identity Agent における脆弱性 CWE-noinfo
情報不足
CVE-2021-30356 2021-12-22 17:58 2021-04-22 Show GitHub Exploit DB Packet Storm
131860 7.5 重要
Network
ABUS Secvest Wireless Alarm System FUAA50000 ファームウェア ABUS Secvest wireless alarm system FUAA50000 における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2020-28973 2021-12-22 17:58 2020-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1101 6.5 MEDIUM
Network
- - Charging station authentication identifiers are publicly accessible via web-based mapping platforms. CWE-522
 Insufficiently Protected Credentials
CVE-2026-44622 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
1102 9.4 CRITICAL
Network
- - WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensiti… CWE-306
Missing Authentication for Critical Function
CVE-2026-40702 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
1103 7.5 HIGH
Network
- - A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted string. CWE-400
 Uncontrolled Resource Consumption
CVE-2026-38640 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
1104 4.2 MEDIUM
Network
- - The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Googl… CWE-862
 Missing Authorization
CVE-2026-2299 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
1105 8.1 HIGH
Network
- - vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability CWE-129
 Improper Validation of Array Index
CVE-2026-22879 2026-06-26 23:17 2026-06-26 Show GitHub Exploit DB Packet Storm
1106 - - - ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.35 in Java applications, allows an attacker to execute arbitrary code circumvent… CWE-20
 Improper Input Validation 
CVE-2026-13006 2026-06-26 23:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1107 8.2 HIGH
Network
- - Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-12473 2026-06-26 23:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1108 7.8 HIGH
Local
- - A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafte… CWE-416
 Use After Free
CVE-2025-60464 2026-06-26 23:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1109 7.8 HIGH
Local
mmaitre314 picklescan picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that execut… CWE-502
 Deserialization of Untrusted Data
CVE-2025-71357 2026-06-26 23:14 2026-06-21 Show GitHub Exploit DB Packet Storm
1110 7.8 HIGH
Local
mmaitre314 picklescan picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection… CWE-502
 Deserialization of Untrusted Data
CVE-2025-71378 2026-06-26 23:12 2026-06-21 Show GitHub Exploit DB Packet Storm