Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132181 8.1 重要
Network 		Xerox AltaLink C8045 ファームウェア
AltaLink B8075 ファームウェア
AltaLink C8035 ファームウェア
AltaLink B8065 ファームウェア
AltaLink C8030 ファームウェア
AltaLink C8070… 		複数の Xerox AltaLink 製品における脆弱性 CWE-noinfo
情報不足 		CVE-2019-18629 2021-11-17 14:20 2019-10-29 Show GitHub Exploit DB Packet Storm
132182 9.8 緊急
Network 		SaltStack
Fedora Project		 Salt
Fedora 		SaltStack Salt におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2021-25283 2021-11-17 14:02 2021-02-25 Show GitHub Exploit DB Packet Storm
132183 9.1 緊急
Network 		SaltStack
Fedora Project		 Salt
Fedora 		SaltStack Salt におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2021-25282 2021-11-17 14:02 2021-02-25 Show GitHub Exploit DB Packet Storm
132184 9.8 緊急
Network 		SaltStack
Fedora Project		 Salt
Fedora 		SaltStack Salt における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2021-25281 2021-11-17 14:02 2021-02-25 Show GitHub Exploit DB Packet Storm
132185 7.4 重要
Network 		SaltStack
Fedora Project		 Salt
Fedora 		SaltStack Salt における証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2020-35662 2021-11-17 14:02 2020-12-23 Show GitHub Exploit DB Packet Storm
132186 7.5 重要
Network 		フォーティネット FortiOS FortiGate における脆弱性 CWE-noinfo
情報不足 		CVE-2020-15938 2021-11-17 13:55 2020-07-24 Show GitHub Exploit DB Packet Storm
132187 8.8 重要
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 におけるリモートでコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2021-42316 2021-11-17 13:54 2021-11-9 Show GitHub Exploit DB Packet Storm
132188 6.5 警告
Network 		マイクロソフト Microsoft Exchange Server Microsoft Exchange Server におけるなりすまされる脆弱性 CWE-noinfo
情報不足 		CVE-2021-42305 2021-11-17 13:54 2021-11-9 Show GitHub Exploit DB Packet Storm
132189 6.8 警告
Physics 		マイクロソフト Azure RTOS Azure RTOS における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-42304 2021-11-17 13:54 2021-11-9 Show GitHub Exploit DB Packet Storm
132190 6.8 警告
Physics 		マイクロソフト Azure RTOS Azure RTOS における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-42303 2021-11-17 13:54 2021-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 8.6 HIGH
Local 		- - When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arb… New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-12057 2026-06-15 21:16 2026-06-15 Show GitHub Exploit DB Packet Storm
182 7.8 HIGH
Local 		- - Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to… New CWE-427
 Uncontrolled Search Path Element 		CVE-2026-50100 2026-06-15 19:16 2026-06-15 Show GitHub Exploit DB Packet Storm
183 5.3 MEDIUM
Network 		- - A flaw was found in Ansible Lightspeed. This vulnerability, related to insufficient session expiration, allows a remote attacker to maintain persistent access to the Ansible Lightspeed instance. If a… New CWE-613
 Insufficient Session Expiration 		CVE-2026-44188 2026-06-15 19:16 2026-06-15 Show GitHub Exploit DB Packet Storm
184 - - - Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. This allows attackers to tamper with serialized payloads in transit and inject mal… New CWE-94
CWE-502
Code Injection
 Deserialization of Untrusted Data 		CVE-2026-11860 2026-06-15 19:16 2026-06-15 Show GitHub Exploit DB Packet Storm
185 5.5 MEDIUM
Adjacent 		- - A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the file /api/inner/tftpuploadiperf of the component Web Fa… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-12223 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
186 8.0 HIGH
Adjacent 		- - A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the function mod_webd.BlueToothTest of the file /api/inner/bttest of the component Web FastCGI Service. Executing a manipu… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-12222 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
187 8.0 HIGH
Adjacent 		- - A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk Upload Handler. Performing a manipulatio… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-12221 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
188 8.0 HIGH
Adjacent 		- - A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgrade.SparePartsUpload of the file /api/upgrade/accupgradebychunk of the component Firmware Chunk Uplo… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-12220 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
189 6.3 MEDIUM
Network 		- - A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagnosis/start of the component Web FastCGI Service. Thi… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-12219 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
190 8.0 HIGH
Adjacent 		- - A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest of the component Web FastCGI Service. T… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-12218 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm