Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
132171	6.1	警告 Network	Matrix	Synapse	Synapse におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2021-21273	2021-11-17 16:28	2021-01-13	Show	GitHub Exploit DB Packet Storm

132172	7.5	重要 Network	ABB	PM556 PM566 PM554 PM564 PM573 PM572	複数の ABB AC500 V2 製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2020-24686	2021-11-17 16:28	2020-08-26	Show	GitHub Exploit DB Packet Storm

132173	7.5	重要 Network	Scytl	Scytl Secure Vote	Scytl sVote におけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2019-25021	2021-11-17 16:28	2021-02-27	Show	GitHub Exploit DB Packet Storm

132174	6.5	警告 Network	Scytl	Scytl Secure Vote	Scytl sVote におけるスプーフィングによる認証回避の脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2019-25023	2021-11-17 16:28	2020-03-5	Show	GitHub Exploit DB Packet Storm

132175	6.7	警告 Local	Google	Android	Android のカーネルにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-0455	2021-11-17 16:23	2021-03-1	Show	GitHub Exploit DB Packet Storm

132176	5.4	警告 Network	batflat	Batflat	Batflat CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-27677	2021-11-17 16:07	2021-02-22	Show	GitHub Exploit DB Packet Storm

132177	5.4	警告 Network	batflat	Batflat	Batflat CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-27678	2021-11-17 15:55	2021-02-22	Show	GitHub Exploit DB Packet Storm

132178	5.4	警告 Network	batflat	Batflat	Batflat CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-27679	2021-11-17 15:49	2021-02-22	Show	GitHub Exploit DB Packet Storm

132179	5.4	警告 Network	ImpressCMS	ImpressCMS	ImpressCMS profile におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-28088	2021-11-17 15:35	2021-03-7	Show	GitHub Exploit DB Packet Storm

132180	7.5	重要 Local	GNU Project レッドハット Fedora Project	Red Hat Enterprise Linux Red Hat Enterprise Linux Server EUS Red Hat Enterprise Linux Server TUS Red Hat Enterprise…	grub2 における認可に関する脆弱性	CWE-285 不適切な認可	CVE-2020-27779	2021-11-17 14:48	2020-11-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1	5.4	MEDIUM Network	vmware	aria_operations cloud_foundation telco_cloud_platform	VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri… Update	CWE-79 Cross-site Scripting	CVE-2026-41724	2026-06-16 03:50	2026-06-8	Show	GitHub Exploit DB Packet Storm

2	6.5	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denia… Update	CWE-400 Uncontrolled Resource Consumption	CVE-2026-11611	2026-06-16 03:41	2026-06-9	Show	GitHub Exploit DB Packet Storm

3	4.9	MEDIUM Network	redhat	389_directory_server	A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer without bounds checking when… Update	CWE-121 Stack-based Buffer Overflow	CVE-2026-11793	2026-06-16 03:34	2026-06-9	Show	GitHub Exploit DB Packet Storm

4	7.2	HIGH Network	qnap	qts quts_hero	A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to e… Update	CWE-78 OS Command	CVE-2026-24719	2026-06-16 03:33	2026-06-10	Show	GitHub Exploit DB Packet Storm

5	7.2	HIGH Network	qnap	qts quts_hero	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerabili… Update	CWE-476 NULL Pointer Dereference	CVE-2026-24716	2026-06-16 03:33	2026-06-10	Show	GitHub Exploit DB Packet Storm

6	7.2	HIGH Network	qnap	qts quts_hero	A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to e… Update	CWE-78 OS Command	CVE-2026-22893	2026-06-16 03:33	2026-06-10	Show	GitHub Exploit DB Packet Storm

7	7.2	HIGH Network	qnap	qts quts_hero	A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS… Update	CWE-476 NULL Pointer Dereference	CVE-2025-66281	2026-06-16 03:32	2026-06-10	Show	GitHub Exploit DB Packet Storm

8	7.2	HIGH Network	qnap	qts quts_hero	A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to e… Update	CWE-78 OS Command	CVE-2025-66279	2026-06-16 03:32	2026-06-10	Show	GitHub Exploit DB Packet Storm

9	7.2	HIGH Network	qnap	qts quts_hero	A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to e… Update	CWE-78 OS Command	CVE-2025-66273	2026-06-16 03:32	2026-06-10	Show	GitHub Exploit DB Packet Storm

10	7.2	HIGH Network	qnap	qts quts_hero	An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vuln… Update	CWE-121 CWE-190 Stack-based Buffer Overflow Integer Overflow or Wraparound	CVE-2025-66280	2026-06-16 03:32	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed