Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
132281	6.1	警告 Network	MB CONNECT LINE	mbCONNECT24 mymbCONNECT24	MB CONNECT LINE mymbCONNECT24 および mbCONNECT24 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-12530	2021-11-10 12:12	2020-04-30	Show	GitHub Exploit DB Packet Storm

132282	6.1	警告 Network	Saasproject	Booking Package - Appointment Booking Calendar System	WordPress 用プラグイン Booking Package - Appointment Booking Calendar System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-20840	2021-11-10 12:07	2021-11-10	Show	GitHub Exploit DB Packet Storm

132283	9.1	緊急 Network	Anuko	Time Tracker	Anuko Time Tracker における不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2021-21352	2021-11-10 12:00	2021-02-28	Show	GitHub Exploit DB Packet Storm

132284	9	緊急 Network	pugjs	pug pug-code-gen	pug および pug-code-gen におけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2021-21353	2021-11-10 11:50	2021-03-1	Show	GitHub Exploit DB Packet Storm

132285	8.8	重要 Network	GitHub	GitHub Enterprise	GitHub Enterprise Server におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2020-10519	2021-11-10 11:25	2020-03-2	Show	GitHub Exploit DB Packet Storm

132286	6.5	警告 Network	GitHub	GitHub Enterprise	GitHub Enterprise Server における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2021-22861	2021-11-10 11:12	2021-03-1	Show	GitHub Exploit DB Packet Storm

132287	6.5	警告 Network	GitHub	GitHub Enterprise	GitHub Enterprise Server における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2021-22862	2021-11-10 10:57	2021-03-2	Show	GitHub Exploit DB Packet Storm

132288	8.1	重要 Network	GitHub	GitHub Enterprise	GitHub Enterprise Server における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2021-22863	2021-11-10 10:49	2021-03-1	Show	GitHub Exploit DB Packet Storm

132289	7.5	重要 Network	Fedora Project Python Software Foundation	Python Pillow Fedora	Pillow におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2021-27921	2021-11-10 10:30	2021-03-3	Show	GitHub Exploit DB Packet Storm

132290	7.5	重要 Network	Fedora Project Python Software Foundation	Python Pillow Fedora	Pillow におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2021-27922	2021-11-10 10:23	2021-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
111	5.5	MEDIUM Local	-	-	A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. New	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2025-46313	2026-06-13 07:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

112	5.5	MEDIUM Local	-	-	This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data. New	CWE-61 UNIX Symbolic Link (Symlink) Following	CVE-2025-43278	2026-06-13 07:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

113	5.5	MEDIUM Local	-	-	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system ter… New	CWE-284 Improper Access Control	CVE-2025-24165	2026-06-13 07:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

114	-		-	-	Rejected reason: This candidate was issued in error. New	-	CVE-2020-2521	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

115	-		-	-	A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharing_group_id to a sharing … New	CWE-863 Incorrect Authorization	CVE-2026-54397	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

116	-		-	-	An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdown was populated using the attacke… New	CWE-200 Information Exposure	CVE-2026-54396	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

117	-		-	-	MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inserted into an inline JavaScript handler using HTML escaping inside a single-quot… New	CWE-79 Cross-site Scripting	CVE-2026-54395	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

118	-		-	-	MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-controlled fields such as id, name, and… New	CWE-22 Path Traversal	CVE-2026-54394	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

119	-		-	-	A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint previously saved the user-controlled path value through setSettingInternal(), bypa… New	CWE-79 Cross-site Scripting	CVE-2026-54393	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

120	-		-	-	An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organisation. The custom ac… New	CWE-863 Incorrect Authorization	CVE-2026-54362	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm