Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132471 6.1 警告
Network 		Saasproject Booking Package - Appointment Booking Calendar System WordPress 用プラグイン Booking Package - Appointment Booking Calendar System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-20840 2021-11-10 12:07 2021-11-10 Show GitHub Exploit DB Packet Storm
132472 9.1 緊急
Network 		Anuko Time Tracker Anuko Time Tracker における不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2021-21352 2021-11-10 12:00 2021-02-28 Show GitHub Exploit DB Packet Storm
132473 9 緊急
Network 		pugjs pug
pug-code-gen 		pug および pug-code-gen におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2021-21353 2021-11-10 11:50 2021-03-1 Show GitHub Exploit DB Packet Storm
132474 8.8 重要
Network 		GitHub GitHub Enterprise GitHub Enterprise Server におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2020-10519 2021-11-10 11:25 2020-03-2 Show GitHub Exploit DB Packet Storm
132475 6.5 警告
Network 		GitHub GitHub Enterprise GitHub Enterprise Server における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-22861 2021-11-10 11:12 2021-03-1 Show GitHub Exploit DB Packet Storm
132476 6.5 警告
Network 		GitHub GitHub Enterprise GitHub Enterprise Server における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-22862 2021-11-10 10:57 2021-03-2 Show GitHub Exploit DB Packet Storm
132477 8.1 重要
Network 		GitHub GitHub Enterprise GitHub Enterprise Server における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-22863 2021-11-10 10:49 2021-03-1 Show GitHub Exploit DB Packet Storm
132478 7.5 重要
Network 		Fedora Project
Python Software Foundation		 Python Pillow
Fedora 		Pillow におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2021-27921 2021-11-10 10:30 2021-03-3 Show GitHub Exploit DB Packet Storm
132479 7.5 重要
Network 		Fedora Project
Python Software Foundation		 Python Pillow
Fedora 		Pillow におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2021-27922 2021-11-10 10:23 2021-03-3 Show GitHub Exploit DB Packet Storm
132480 7.5 重要
Network 		Fedora Project
Python Software Foundation		 Python Pillow
Fedora 		Pillow におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2021-27923 2021-11-10 10:14 2021-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
511 8.3 HIGH
Network 		google chrome Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag… CWE-416
 Use After Free 		CVE-2026-12023 2026-06-13 03:06 2026-06-12 Show GitHub Exploit DB Packet Storm
512 5.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craft… CWE-20
 Improper Input Validation  		CVE-2026-12025 2026-06-13 03:06 2026-06-12 Show GitHub Exploit DB Packet Storm
513 8.3 HIGH
Network 		google chrome Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… CWE-416
 Use After Free 		CVE-2026-12028 2026-06-13 03:06 2026-06-12 Show GitHub Exploit DB Packet Storm
514 8.3 HIGH
Network 		google chrome Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT… CWE-416
 Use After Free 		CVE-2026-12029 2026-06-13 03:05 2026-06-12 Show GitHub Exploit DB Packet Storm
515 8.3 HIGH
Network 		google chrome Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… CWE-122
Heap-based Buffer Overflow 		CVE-2026-12030 2026-06-13 03:05 2026-06-12 Show GitHub Exploit DB Packet Storm
516 8.3 HIGH
Network 		google chrome Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi… CWE-693
 Protection Mechanism Failure 		CVE-2026-12031 2026-06-13 03:05 2026-06-12 Show GitHub Exploit DB Packet Storm
517 3.1 LOW
Network 		google chrome Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted… CWE-346
 Origin Validation Error 		CVE-2026-12032 2026-06-13 03:05 2026-06-12 Show GitHub Exploit DB Packet Storm
518 5.3 MEDIUM
Network 		google chrome Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memo… CWE-125
Out-of-bounds Read 		CVE-2026-12033 2026-06-13 03:04 2026-06-12 Show GitHub Exploit DB Packet Storm
519 8.7 HIGH
Network 		axios axios Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototyp… CWE-441
CWE-1321
Confused Deputy
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-44494 2026-06-13 03:01 2026-06-12 Show GitHub Exploit DB Packet Storm
520 7.5 HIGH
Network 		axios axios Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF co… CWE-400
CWE-1333
 Uncontrolled Resource Consumption
 Inefficient Regular Expression Complexity 		CVE-2026-44496 2026-06-13 03:00 2026-06-12 Show GitHub Exploit DB Packet Storm