Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
131911 7 重要
Local
レッドハット Red Hat OpenShift Container Platform Red Hat OpenShift における不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定
CVE-2019-19353 2021-12-13 10:53 2019-11-27 Show GitHub Exploit DB Packet Storm
131912 7 重要
Local
レッドハット Red Hat OpenShift Container Platform Red Hat OpenShift における不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定
CVE-2019-19352 2021-12-13 10:53 2019-11-27 Show GitHub Exploit DB Packet Storm
131913 5.5 警告
Local
haserl project haserl haserl における脆弱性 CWE-noinfo
情報不足
CVE-2021-29133 2021-12-13 10:53 2021-03-23 Show GitHub Exploit DB Packet Storm
131914 8.8 重要
Network
ネットギア R7000 ファームウェア
R7850 ファームウェア
R6900P ファームウェア
R6400 ファームウェア
R8000 ファームウェア
R7000P ファームウェア
R7900 ファームウェア
R6700 ファームウェア
複数の NETGEAR デバイスにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2021-29068 2021-12-13 10:53 2021-03-18 Show GitHub Exploit DB Packet Storm
131915 9.8 緊急
Network
SonicWALL e-mail security
hosted e-mail security
SonicWall Email Security における権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2021-20021 2021-12-13 10:34 2021-04-9 Show GitHub Exploit DB Packet Storm
131916 7.2 重要
Network
SonicWALL e-mail security
hosted e-mail security
SonicWall Email Security における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2021-20022 2021-12-13 10:24 2021-04-9 Show GitHub Exploit DB Packet Storm
131917 9.8 緊急
Network
ZEROF ZEROF Web Server ZEROF Web Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2021-30175 2021-12-13 10:01 2021-04-13 Show GitHub Exploit DB Packet Storm
131918 9.8 緊急
Network
Nagios Enterprises, LLC Nagios Network Analyzer Nagios Network Analyzer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2021-28925 2021-12-10 18:11 2021-03-16 Show GitHub Exploit DB Packet Storm
131919 6.5 警告
Network
IBM IBM WebSphere Application Server IBM WebSphere Application Server におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2021-20480 2021-12-10 18:11 2021-04-7 Show GitHub Exploit DB Packet Storm
131920 6.5 警告
Network
WEB-SCHOOL ERP Web-School ERP におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2021-30114 2021-12-10 18:11 2021-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
931 7.5 HIGH
Network
axios axios Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a … CWE-200
Information Exposure
CVE-2026-44486 2026-06-13 12:16 2026-06-12 Show GitHub Exploit DB Packet Storm
932 8.8 HIGH
Network
vim vim Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/a… CWE-74
CWE-94
Injection
Code Injection
CVE-2026-47162 2026-06-13 10:04 2026-06-12 Show GitHub Exploit DB Packet Storm
933 7.5 HIGH
Network
apache cxf There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead to uncontrolled resource consumption or a denial of servic… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-50645 2026-06-13 10:00 2026-06-12 Show GitHub Exploit DB Packet Storm
934 8.3 HIGH
Adjacent
google chrome Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traffic. (Chromium secur… CWE-416
 Use After Free
CVE-2026-12014 2026-06-13 09:54 2026-06-12 Show GitHub Exploit DB Packet Storm
935 5.3 MEDIUM
Network
google chrome Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory … CWE-416
 Use After Free
CVE-2026-12015 2026-06-13 09:54 2026-06-12 Show GitHub Exploit DB Packet Storm
936 8.3 HIGH
Network
google chrome Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf… CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-12016 2026-06-13 09:52 2026-06-12 Show GitHub Exploit DB Packet Storm
937 3.1 LOW
Network
google chrome Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page… CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-12017 2026-06-13 09:51 2026-06-12 Show GitHub Exploit DB Packet Storm
938 8.3 HIGH
Network
google chrome Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap… CWE-787
 Out-of-bounds Write
CVE-2026-12019 2026-06-13 09:45 2026-06-12 Show GitHub Exploit DB Packet Storm
939 8.8 HIGH
Network
google chrome Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-12020 2026-06-13 09:34 2026-06-12 Show GitHub Exploit DB Packet Storm
940 8.3 HIGH
Network
google chrome Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. … CWE-362
Race Condition
CVE-2026-12022 2026-06-13 09:33 2026-06-12 Show GitHub Exploit DB Packet Storm