Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
132211 7.5 重要
Network
Fedora Project
Debian
Leptonica
Debian GNU/Linux
Leptonica
Fedora
Leptonica における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2020-36278 2021-11-19 16:20 2020-06-15 Show GitHub Exploit DB Packet Storm
132212 7.8 重要
Local
- Interactive Graphical SCADA System におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2021-22712 2021-11-19 16:20 2021-03-9 Show GitHub Exploit DB Packet Storm
132213 7.8 重要
Local
- Interactive Graphical SCADA System におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2021-22711 2021-11-19 16:20 2021-03-9 Show GitHub Exploit DB Packet Storm
132214 7.8 重要
Local
- Interactive Graphical SCADA System におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2021-22709 2021-11-19 16:20 2021-03-9 Show GitHub Exploit DB Packet Storm
132215 7.5 重要
Network
Leptonica Leptonica Leptonica における常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装
CVE-2020-36277 2021-11-19 16:20 2020-05-7 Show GitHub Exploit DB Packet Storm
132216 7.2 重要
Network
Bloomreach Bloomreach Experience Manager Bloomreach Experience Manager における認証の欠如に関する脆弱性 CWE-74
CWE-862
CVE-2020-14987 2021-11-19 16:20 2020-10-27 Show GitHub Exploit DB Packet Storm
132217 5.4 警告
Network
CSZ CMS CSZ-CMS CSZ CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2021-26776 2021-11-19 16:20 2021-02-2 Show GitHub Exploit DB Packet Storm
132218 5.4 警告
Network
IBM Tivoli Netcool/OMNIbus Web GUI IBM Tivoli Netcool/OMNIbus_GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2021-20336 2021-11-19 16:20 2021-03-8 Show GitHub Exploit DB Packet Storm
132219 7.8 重要
Local
IBM
NetApp
OnCommand Insight
IBM DB2
複数の OS 上で稼動する IBM DB2 における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2020-5025 2021-11-19 16:20 2021-03-10 Show GitHub Exploit DB Packet Storm
132220 7.5 重要
Network
IBM
NetApp
OnCommand Insight
IBM DB2
複数の OS 上で稼動する IBM DB2 における脆弱性 CWE-noinfo
情報不足
CVE-2020-5024 2021-11-19 16:20 2021-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
431 5.3 MEDIUM
Network
- - Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. New CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-42657 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
432 7.1 HIGH
Network
- - Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. New CWE-79
Cross-site Scripting
CVE-2026-42658 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
433 6.5 MEDIUM
Network
- - Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. New CWE-862
 Missing Authorization
CVE-2026-42659 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
434 6.5 MEDIUM
Network
- - Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-42660 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
435 8.8 HIGH
Network
- - Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. New CWE-35
 Path Traversal: '.../...//'
CVE-2026-42661 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
436 6.5 MEDIUM
Network
- - Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions. New CWE-290
 Authentication Bypass by Spoofing
CVE-2026-42662 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
437 6.5 MEDIUM
Network
- - Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. New CWE-79
Cross-site Scripting
CVE-2026-42663 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
438 8.2 HIGH
Network
- - Unauthenticated Broken Access Control in AI Product Search for WooCommerce &#8211; Motive Commerce Search <= 1.38.2 versions. New CWE-862
 Missing Authorization
CVE-2026-42664 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
439 9.3 CRITICAL
Network
- - Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. New CWE-89
SQL Injection
CVE-2026-42665 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
440 7.5 HIGH
Network
- - Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions. New CWE-862
 Missing Authorization
CVE-2026-42666 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm