Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131851 7.5 重要
Network 		レッドハット
Pygments
Fedora Project		 Red Hat Software Collections
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux
Fedora
Red Hat OpenStack Platfo… 		Pygments における無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2021-20270 2021-11-26 14:53 2021-01-29 Show GitHub Exploit DB Packet Storm
131852 4.3 警告
Network 		GitLab.org GitLab GitLab EE における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2021-22169 2021-11-26 14:08 2021-03-24 Show GitHub Exploit DB Packet Storm
131853 5.3 警告
Network 		npm, Inc. hosted-git-info hosted-git-info パッケージにおける脆弱性 CWE-Other
その他 		CVE-2021-23362 2021-11-26 13:50 2021-01-29 Show GitHub Exploit DB Packet Storm
131854 7.8 重要
Local 		Robert Bosch GmbH IP Helper Bosch IP Helper における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2020-6771 2021-11-26 12:15 2020-01-10 Show GitHub Exploit DB Packet Storm
131855 8.8 重要
Network 		baserCMSユーザー会 baserCMS baserCMS における複数の脆弱性 CWE-78
CWE-Other
CVE-2021-41243
CVE-2021-41279 		2021-11-26 12:06 2021-11-26 Show GitHub Exploit DB Packet Storm
131856 7.8 重要
Local 		Robert Bosch GmbH Bosch BVMS Viewer Bosch BVMS および BVMS Viewer における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2020-6785 2021-11-26 11:53 2020-01-10 Show GitHub Exploit DB Packet Storm
131857 7.8 重要
Local 		三菱電機 GENESIS64
MC Works64 		三菱電機製 GENESIS64 および MC Works64 の AutoCAD (DWG) ファイルのインポート機能における複数の脆弱性 CWE-125
CWE-787
CVE-2021-27040
CVE-2021-27041 		2021-11-26 11:40 2021-10-22 Show GitHub Exploit DB Packet Storm
131858 7.8 重要
Local 		- Bosch Video Recording Manager installer における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2020-6786 2021-11-26 11:32 2020-01-10 Show GitHub Exploit DB Packet Storm
131859 7.8 重要
Local 		Robert Bosch GmbH Bosch Video Client (BVC) Bosch Video Client installer における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2020-6787 2021-11-26 11:23 2020-01-10 Show GitHub Exploit DB Packet Storm
131860 7.8 重要
Local 		Robert Bosch GmbH Configuration Manager Bosch Configuration Manager installer における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2020-6788 2021-11-26 11:11 2021-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 8.2 HIGH
Network 		- - Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and ga… New CWE-287
Improper Authentication 		CVE-2026-48780 2026-06-17 00:46 2026-06-17 Show GitHub Exploit DB Packet Storm
142 9.1 CRITICAL
Network 		- - Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation keys (e.g. via i18next-http-middleware's missingKeyHandler expos… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-48713 2026-06-17 00:46 2026-06-16 Show GitHub Exploit DB Packet Storm
143 9.1 CRITICAL
Network 		- - i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In versions prior to 3.9.7, the missingKeyHandler blocked the literal request… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-48714 2026-06-17 00:46 2026-06-16 Show GitHub Exploit DB Packet Storm
144 7.1 HIGH
Local 		- - A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method in `kedro/io/core.py` directly interpolat… Update CWE-22
Path Traversal 		CVE-2026-3840 2026-06-17 00:42 2026-06-13 Show GitHub Exploit DB Packet Storm
145 8.8 HIGH
Network 		- - Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote threat actor operating a server to cause memory corruption on a connecting clie… Update CWE-415
 Double Free 		CVE-2026-12043 2026-06-17 00:42 2026-06-13 Show GitHub Exploit DB Packet Storm
146 7.5 HIGH
Network 		- - form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into… Update CWE-93
CRLF Injection 		CVE-2026-12143 2026-06-17 00:42 2026-06-13 Show GitHub Exploit DB Packet Storm
147 7.5 HIGH
Network 		- - IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser. Update CWE-674
 Uncontrolled Recursion 		CVE-2026-4870 2026-06-17 00:42 2026-06-13 Show GitHub Exploit DB Packet Storm
148 - - - We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. ### S… Update CWE-22
Path Traversal 		CVE-2026-11769 2026-06-17 00:42 2026-06-13 Show GitHub Exploit DB Packet Storm
149 - - - The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users ha… Update CWE-346
 Origin Validation Error 		CVE-2026-11624 2026-06-17 00:42 2026-06-13 Show GitHub Exploit DB Packet Storm
150 5.5 MEDIUM
Local 		- - Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or processes via world-readable permissions … New CWE-276
Incorrect Default Permissions  		CVE-2026-11931 2026-06-17 00:42 2026-06-16 Show GitHub Exploit DB Packet Storm