Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131891 9.8 緊急
Network 		Grav CMS Grav Admin Plugin Grav Admin Plugin における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2021-21425 2021-12-15 17:55 2021-04-7 Show GitHub Exploit DB Packet Storm
131892 9.8 緊急
Network 		D-Link Systems, Inc. DSL-320B-D1 D-Link DSL-320B-D1 デバイスにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2021-26709 2021-12-15 17:55 2021-01-22 Show GitHub Exploit DB Packet Storm
131893 7.5 重要
Network 		phpseclib phpseclib phpseclib におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2021-30130 2021-12-15 17:55 2021-04-6 Show GitHub Exploit DB Packet Storm
131894 5.3 警告
Network 		Debian
Fedora Project
Django Software Foundation		 Debian GNU/Linux
Fedora
Django 		Django におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2021-28658 2021-12-15 17:55 2021-04-6 Show GitHub Exploit DB Packet Storm
131895 7.8 重要
Local 		FreeBSD FreeBSD FreeBSD における解放済みメモリの使用に関する脆弱性 CWE-415
CWE-416
CVE-2021-29627 2021-12-15 17:52 2021-04-6 Show GitHub Exploit DB Packet Storm
131896 5.5 警告
Local 		FreeBSD FreeBSD FreeBSD における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-29626 2021-12-15 17:52 2021-04-6 Show GitHub Exploit DB Packet Storm
131897 7.5 重要
Local 		FreeBSD FreeBSD FreeBSD における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2020-25584 2021-12-15 17:52 2020-09-14 Show GitHub Exploit DB Packet Storm
131898 9.8 緊急
Network 		Swiperjs Swiper swiper における脆弱性 CWE-noinfo
情報不足 		CVE-2021-23370 2021-12-15 17:52 2021-03-25 Show GitHub Exploit DB Packet Storm
131899 7.5 重要
Network 		Chrono-node project Chrono-node chrono-node における脆弱性 CWE-noinfo
情報不足 		CVE-2021-23371 2021-12-15 17:52 2021-03-13 Show GitHub Exploit DB Packet Storm
131900 5.5 警告
Local 		Google Android Android における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2021-25357 2021-12-15 17:52 2021-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1071 6.5 MEDIUM
Network 		- - The Gravity Forms Booking plugin for WordPress is vulnerable to time-based SQL Injection via the ‘staff_id’ parameter in all versions up to, and including, 2.7.1 due to insufficient escaping on the u… CWE-89
SQL Injection 		CVE-2026-2508 2026-06-25 22:26 2026-06-25 Show GitHub Exploit DB Packet Storm
1072 6.5 MEDIUM
Network 		- - Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gat… CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2026-54324 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1073 7.0 HIGH
Network 		- - Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private coul… CWE-613
CWE-863
 Insufficient Session Expiration
 Incorrect Authorization 		CVE-2026-54321 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1074 4.2 MEDIUM
Network 		- - Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certain malformed HTML, … CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-52846 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1075 7.6 HIGH
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI patched SVG XSS in user profile images and webhook profile images but for… CWE-79
CWE-116
CWE-693
Cross-site Scripting
 Improper Encoding or Escaping of Output
 Protection Mechanism Failure 		CVE-2026-54013 2026-06-25 22:06 2026-06-24 Show GitHub Exploit DB Packet Storm
1076 - - - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect… - CVE-2026-53277 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1077 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the bis pointer is cached, then the socket … - CVE-2026-53276 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1078 - - - In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query, a pointer to the multicast group addres… - CVE-2026-53275 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1079 - - - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS A logic flaw in __smc_setsockopt() allows a local unprivil… - CVE-2026-53274 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1080 - - - In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a199 ("tee: optee: Fix supplicant w… - CVE-2026-53273 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm