Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132261 6.5 警告
Network 		wpDataTables wpDataTables WordPress 用 wpDataTables プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2021-24200 2021-12-10 12:05 2021-03-10 Show GitHub Exploit DB Packet Storm
132262 6.5 警告
Network 		wpDataTables wpDataTables WordPress 用 wpDataTables プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2021-24199 2021-12-10 12:05 2021-03-10 Show GitHub Exploit DB Packet Storm
132263 8.1 重要
Network 		wpDataTables wpDataTables WordPress 用 wpDataTables プラグインにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2021-24198 2021-12-10 12:05 2021-03-10 Show GitHub Exploit DB Packet Storm
132264 8.1 重要
Network 		wpDataTables wpDataTables WordPress 用 wpDataTables プラグインにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2021-24197 2021-12-10 12:05 2021-03-10 Show GitHub Exploit DB Packet Storm
132265 4.3 警告
Network 		GLPI Dashboard project GLPI Dashboard GLPI 用 Dashboard プラグインにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-30144 2021-12-10 12:04 2021-04-6 Show GitHub Exploit DB Packet Storm
132266 9.8 緊急
Network 		ocProducts Ltd Composr CMS Composr における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2021-30149 2021-12-10 11:52 2021-04-6 Show GitHub Exploit DB Packet Storm
132267 6.1 警告
Network 		Contributed Systems LLC. Sidekiq Sidekiq におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-30151 2021-12-10 11:36 2021-03-25 Show GitHub Exploit DB Packet Storm
132268 6.1 警告
Network 		MediaWiki
Fedora Project
Debian		 Debian GNU/Linux
MediaWiki
Fedora 		MediaWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-30157 2021-12-10 11:18 2021-03-21 Show GitHub Exploit DB Packet Storm
132269 5.3 警告
Network 		MediaWiki
Fedora Project
Debian		 Debian GNU/Linux
MediaWiki
Fedora 		MediaWiki における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2021-30158 2021-12-10 11:03 2021-03-10 Show GitHub Exploit DB Packet Storm
132270 9.8 緊急
Network 		deltaflow project deltaFlow Vangene deltaFlow E-platform における認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2021-28171 2021-12-10 10:47 2021-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1301 3.7 LOW
Network 		- - An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The pr… New CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-40011 2026-06-26 01:00 2026-06-25 Show GitHub Exploit DB Packet Storm
1302 3.7 LOW
Network 		- - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. New CWE-705
 Incorrect Control Flow Scoping 		CVE-2026-40208 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1303 5.3 MEDIUM
Network 		- - An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a… New CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2026-40209 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1304 4.8 MEDIUM
Network 		- - An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash. New CWE-126
 Buffer Over-read 		CVE-2026-40210 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1305 5.3 MEDIUM
Network 		- - An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-40211 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1306 3.7 LOW
Network 		- - An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend … New CWE-115
 Misinterpretation of Input 		CVE-2026-42004 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1307 5.3 MEDIUM
Network 		- - An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation. New CWE-20
 Improper Input Validation  		CVE-2026-42390 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1308 5.9 MEDIUM
Network 		- - Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail. New CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-52690 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1309 4.7 MEDIUM
Network 		google chrome Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.… New CWE-346
 Origin Validation Error 		CVE-2026-13034 2026-06-26 00:23 2026-06-25 Show GitHub Exploit DB Packet Storm
1310 6.5 MEDIUM
Network 		- - Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. New CWE-862
 Missing Authorization 		CVE-2026-57619 2026-06-26 00:16 2026-06-25 Show GitHub Exploit DB Packet Storm