Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132471 7.8 重要
Local 		クアルコム PM6350 ファームウェア
AQT1000 ファームウェア
PM3003A ファームウェア
PM660 ファームウェア
PM6150A ファームウェア
PM456 ファームウェア
PM6250 ファームウェア
PM6150 ファームウェア
PM660A ファ… 		複数の Qualcomm 製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2020-11223 2021-11-12 12:20 2020-11-2 Show GitHub Exploit DB Packet Storm
132472 6.5 警告
Network 		Google
Fedora Project		 Google Chrome
Fedora 		Google Chrome の Autofill における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2021-21177 2021-11-12 12:07 2021-03-2 Show GitHub Exploit DB Packet Storm
132473 4.3 警告
Network 		XML-Sitemaps Unlimited Sitemap Generator Unlimited Sitemap Generator におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2021-20845 2021-11-12 12:05 2021-11-12 Show GitHub Exploit DB Packet Storm
132474 6.5 警告
Network 		Google
Fedora Project		 Google Chrome
Fedora 		Linux および Windows 上で稼働する Google Chrome の Compositing における脆弱性 CWE-noinfo
情報不足 		CVE-2021-21178 2021-11-12 11:59 2021-03-2 Show GitHub Exploit DB Packet Storm
132475 8.8 重要
Network 		Google
Fedora Project		 Google Chrome
Fedora 		Linux 上で稼働する Google Chrome の Network Internals における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-21179 2021-11-12 11:53 2021-03-2 Show GitHub Exploit DB Packet Storm
132476 6.5 警告
Network 		Google
Fedora Project		 Google Chrome
Fedora 		Google Chrome の autofill における脆弱性 CWE-noinfo
情報不足 		CVE-2021-21181 2021-11-12 11:44 2021-03-2 Show GitHub Exploit DB Packet Storm
132477 4.3 警告
Network 		Google
Fedora Project		 Google Chrome
Fedora 		Google Chrome の performance APIs における同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2021-21183 2021-11-12 11:38 2021-03-2 Show GitHub Exploit DB Packet Storm
132478 4.3 警告
Network 		Google
Fedora Project		 Google Chrome
Fedora 		Google Chrome の performance APIs における同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2021-21184 2021-11-12 11:30 2021-03-2 Show GitHub Exploit DB Packet Storm
132479 7.8 重要
Local 		zscaler Zscaler Client Connector Zscaler Client Connector における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2020-11635 2021-11-12 11:30 2020-04-8 Show GitHub Exploit DB Packet Storm
132480 4.3 警告
Network 		Google
Fedora Project		 Google Chrome
Fedora 		Google Chrome の拡張機能における脆弱性 CWE-noinfo
情報不足 		CVE-2021-21185 2021-11-12 11:24 2021-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
551 6.5 MEDIUM
Network 		- - The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. This is an instance of "CWE-306: Missing Authentication for Critical Fun… CWE-306
Missing Authentication for Critical Function 		CVE-2026-50082 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
552 4.3 MEDIUM
Network 		- - NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metada… CWE-125
Out-of-bounds Read 		CVE-2026-47224 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
553 9.8 CRITICAL
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code execution in the host process when untrusted code is executed with a… CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-47210 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
554 10.0 CRITICAL
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as module, worker_threads, cluster, vm, repl, and inspector. However, the … CWE-693
 Protection Mechanism Failure 		CVE-2026-47140 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
555 8.6 HIGH
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding public network builtins from the wildcard builtin option. With this configuration direct access to htt… CWE-693
 Protection Mechanism Failure 		CVE-2026-47139 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
556 5.8 MEDIUM
Local 		- - unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race. At time of p… CWE-125
CWE-415
CWE-704
CWE-787
Out-of-bounds Read
 Double Free
 Incorrect Type Conversion or Cast
 Out-of-bounds Write 		CVE-2026-46690 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
557 - - - A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository a… CWE-94
Code Injection 		CVE-2026-45833 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
558 5.3 MEDIUM
Adjacent 		- - OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. Prior to release 1.27.0, the OTLP HTTP exporters (traces/metrics/logs) read the full HTTP response into an in-memory vector of bytes with… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-44967 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
559 4.3 MEDIUM
Network 		- - Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to restrict role_updated websocket event broadcasts to members of the affected team or channel wh… CWE-200
Information Exposure 		CVE-2026-3433 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
560 5.9 MEDIUM
Network 		- - Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying deri… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2017-20240 2026-06-13 02:16 2026-06-12 Show GitHub Exploit DB Packet Storm