Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
132281 7.8 重要
Local
DOUZONE ICT GROUP. NBBDownloader.ocx NBBDownloader.ocx における引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2020-7850 2021-12-6 16:04 2020-01-22 Show GitHub Exploit DB Packet Storm
132282 7.2 重要
Network
Underscore.js
Debian
Underscore
Debian GNU/Linux
underscore パッケージ におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2021-23358 2021-12-6 16:04 2021-04-1 Show GitHub Exploit DB Packet Storm
132283 6.5 警告
Network
Wire Swiss GmbH wire-server wire-server における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2021-21396 2021-12-6 16:04 2021-03-2 Show GitHub Exploit DB Packet Storm
132284 8.8 重要
Network
BuddyPress.org BuddyPress WordPress 用 BuddyPress プラグインにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2021-21389 2021-12-6 16:04 2021-03-16 Show GitHub Exploit DB Packet Storm
132285 6.8 警告
Physics
アルバネットワークス株式会社 Aruba Instant Aruba Instant Access Point における認証に関する脆弱性 CWE-287
不適切な認証
CVE-2019-5317 2021-12-6 16:04 2019-01-4 Show GitHub Exploit DB Packet Storm
132286 8.8 重要
Network
Mozilla Foundation Mozilla Firefox Firefox におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2021-23988 2021-12-6 15:27 2021-03-23 Show GitHub Exploit DB Packet Storm
132287 8.8 重要
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla Firefox ESR
Firefox および Thunderbird におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2021-23987 2021-12-6 15:26 2021-03-23 Show GitHub Exploit DB Packet Storm
132288 6.5 警告
Network
Mozilla Foundation Mozilla Firefox Firefox における同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2021-23986 2021-12-6 15:26 2021-03-23 Show GitHub Exploit DB Packet Storm
132289 6.5 警告
Network
Mozilla Foundation Mozilla Firefox Firefox における誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2021-23985 2021-12-6 15:25 2021-03-23 Show GitHub Exploit DB Packet Storm
132290 6.5 警告
Network
Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla Firefox ESR
Firefox および Thunderbird におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2021-23984 2021-12-6 15:25 2021-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 8.2 HIGH
Network
- - Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions) allow mutiple metrics,separated by newlines, to be sent p… CWE-93
CRLF Injection
CVE-2026-50637 2026-06-12 05:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1232 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-12038 2026-06-12 05:16 2026-06-12 Show GitHub Exploit DB Packet Storm
1233 4.0 MEDIUM
Local
nsa ghidra Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability s… CWE-758
 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2024-58350 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
1234 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. CWE-190
 Integer Overflow or Wraparound
CVE-2026-42916 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
1235 5.5 MEDIUM
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally. CWE-125
Out-of-bounds Read
CVE-2026-42968 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
1236 5.5 MEDIUM
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w…
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. CWE-908
 Use of Uninitialized Resource
CVE-2026-42969 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
1237 5.5 MEDIUM
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. CWE-200
Information Exposure
CVE-2026-42970 2026-06-12 04:52 2026-06-10 Show GitHub Exploit DB Packet Storm
1238 5.5 MEDIUM
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w…
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. CWE-200
Information Exposure
CVE-2026-42971 2026-06-12 04:52 2026-06-10 Show GitHub Exploit DB Packet Storm
1239 7.8 HIGH
Local
nsa ghidra Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious… CWE-22
Path Traversal
CVE-2026-52755 2026-06-12 04:52 2026-06-10 Show GitHub Exploit DB Packet Storm
1240 8.8 HIGH
Network
nsa ghidra Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-signed certificate to impersonate other users by pres… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-52754 2026-06-12 04:52 2026-06-10 Show GitHub Exploit DB Packet Storm