Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132451 7.5 重要
Network 		F5 Networks BIG-IQ Centralized Management BIG-IQ Centralized Management における脆弱性 CWE-noinfo
情報不足 		CVE-2021-22996 2021-12-7 18:09 2021-03-10 Show GitHub Exploit DB Packet Storm
132452 7.1 重要
Local 		OpenVPN Technologies OpenVPN Connect macOS 用 OpenVPN Connect installer におけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2020-15075 2021-12-7 18:09 2020-06-25 Show GitHub Exploit DB Packet Storm
132453 5.3 警告
Network 		mobileiron mobile@work MobileIron Mobile@Work における脆弱性 CWE-noinfo
情報不足 		CVE-2021-3391 2021-12-7 18:09 2021-03-22 Show GitHub Exploit DB Packet Storm
132454 4.8 警告
Network 		Course Registration Management System project Course Registration Management System CourseMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-29663 2021-12-7 18:09 2021-03-30 Show GitHub Exploit DB Packet Storm
132455 5.4 警告
Network 		PrestaShop ps_emailsubscription ps_emailsubscription におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-21418 2021-12-7 18:09 2021-03-30 Show GitHub Exploit DB Packet Storm
132456 8.8 重要
Network 		vscode-rufo project vscode-rufo Visual Studio Code 用 vscode-rufo エクステンションにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-29658 2021-12-7 18:09 2021-03-31 Show GitHub Exploit DB Packet Storm
132457 9.8 緊急
Network 		D-Link Systems, Inc. DIR-816 A2 ファームウェア D-link DIR-816 A2 におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2021-26810 2021-12-7 18:09 2021-02-4 Show GitHub Exploit DB Packet Storm
132458 5.3 警告
Network 		Netmask project Netmask Node.js 用 netmask パッケージにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2021-29418 2021-12-7 18:04 2021-03-29 Show GitHub Exploit DB Packet Storm
132459 6.5 警告
Network 		PortSwigger Burp Suite PortSwigger Burp Suite におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2021-29416 2021-12-7 18:04 2021-03-29 Show GitHub Exploit DB Packet Storm
132460 9.8 緊急
Network 		Xerox Versalink B405 ファームウェア
Versalink B605 ファームウェア
WorkCentre 6515 ファームウェア
Phaser 6510 ファームウェア
Versalink B400 ファームウェア
Versalink B615&n… 		複数の Xerox 製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2021-28672 2021-12-7 18:04 2021-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1491 8.1 HIGH
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints authorized access using credential:read rather than cre… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-45732 2026-06-24 22:56 2026-06-24 Show GitHub Exploit DB Packet Storm
1492 9.0 CRITICAL
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could c… CWE-89
SQL Injection 		CVE-2026-44792 2026-06-24 22:55 2026-06-24 Show GitHub Exploit DB Packet Storm
1493 8.8 HIGH
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flags on the Git node's… CWE-88
Argument Injection 		CVE-2026-44790 2026-06-24 22:54 2026-06-24 Show GitHub Exploit DB Packet Storm
1494 9.3 CRITICAL
Network 		langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for a… CWE-200
CWE-306
CWE-400
Information Exposure
Missing Authentication for Critical Function
 Uncontrolled Resource Consumption 		CVE-2026-55450 2026-06-24 22:50 2026-06-24 Show GitHub Exploit DB Packet Storm
1495 7.5 HIGH
Network 		langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v1/files/upload/ request without any authentication token/cookies and abuse… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-55446 2026-06-24 22:50 2026-06-24 Show GitHub Exploit DB Packet Storm
1496 6.1 MEDIUM
Physics 		langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user expl… CWE-613
 Insufficient Session Expiration 		CVE-2026-55423 2026-06-24 22:50 2026-06-24 Show GitHub Exploit DB Packet Storm
1497 9.9 CRITICAL
Network 		langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authent… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-55255 2026-06-24 22:47 2026-06-24 Show GitHub Exploit DB Packet Storm
1498 5.3 MEDIUM
Network 		- - Hono before 4.12.12 does not validate cookie names on the write path in the setCookie(), serialize(), and serializeSigned() functions, allowing invalid characters such as control characters (e.g. \r … CWE-20
 Improper Input Validation  		CVE-2026-56762 2026-06-24 22:16 2026-06-23 Show GitHub Exploit DB Packet Storm
1499 - - - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE FSCTL_SET_SPARSE in fsctl_set_sparse() modif… - CVE-2026-52944 2026-06-24 19:17 2026-06-24 Show GitHub Exploit DB Packet Storm
1500 - - - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_inside_header() and pskb_carve_inside_nonlinear() bo… - CVE-2026-52943 2026-06-24 19:17 2026-06-24 Show GitHub Exploit DB Packet Storm