Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
132521	5.9	警告 Network	twitter-stream	twitter-stream	voloko twitter-stream における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2020-24392	2021-11-9 14:31	2020-09-22	Show	GitHub Exploit DB Packet Storm

132522	8.8	重要 Network	Atlassian	Alfresco Enterprise Content Management	Alfresco Enterprise Content Management におけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2020-12873	2021-11-9 14:31	2020-07-15	Show	GitHub Exploit DB Packet Storm

132523	6.5	警告 Network	HubSpot	Jinjava	Jinjava における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2020-12668	2021-11-9 14:31	2020-05-5	Show	GitHub Exploit DB Packet Storm

132524	6.5	警告 Local	Xen プロジェクト Linux	Linux Kernel Xen	Xen で使用される Linux Kernel におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2021-28039	2021-11-9 14:05	2021-03-4	Show	GitHub Exploit DB Packet Storm

132525	7.5	重要 Network	OSSEC	OSSEC	OSSEC における再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2021-28040	2021-11-9 12:03	2021-02-23	Show	GitHub Exploit DB Packet Storm

132526	7.1	重要 Network	OpenBSD NetApp Fedora Project	NetApp HCI Compute Node ファームウェア NetApp HCI Storage Node ファームウェア Fedora NetApp HCI Management Node OpenSSH NetApp Cloud …	OpenSSH における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2021-28041	2021-11-9 11:17	2021-03-3	Show	GitHub Exploit DB Packet Storm

132527	5.5	警告 Local	Apache Software Foundation	AsterixDB	Apache AsterixDB におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2020-9479	2021-11-9 10:42	2020-08-7	Show	GitHub Exploit DB Packet Storm

132528	6.1	警告 Network	Apache Software Foundation	Ambari	Apache Ambari におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-1936	2021-11-9 10:27	2021-03-2	Show	GitHub Exploit DB Packet Storm

132529	5.9	警告 Network	SaltStack Fedora Project	Salt Fedora	SaltStack Salt における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2020-28972	2021-11-9 10:13	2020-11-20	Show	GitHub Exploit DB Packet Storm

132530	9.8	緊急 Network	Zucchetti s.p.a.	HR Portal	HR Portal of Soar Cloud System における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2021-22855	2021-11-8 18:15	2021-02-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
561	-		-	-	Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, the repository has a privileged deploy workflow that runs after the unprivileged bui…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-47172	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

562	-		-	-	PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection vulnerability in the password reset endpoint allows any authenticated user to change the password of…	CWE-20 CWE-943 Improper Input Validation Improper Neutralization of Special Elements in Data Query Logic	CVE-2026-47181	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

563	-		-	-	Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the AutoMod remove flow looks up and deletes rules by global database ID without ver…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-47189	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

564	7.3	HIGH Network	-	-	KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes …	CWE-78 OS Command	CVE-2026-48547	2026-06-12 05:57	2026-06-12	Show	GitHub Exploit DB Packet Storm

565	-		-	-	Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploit this by manipulat…	CWE-269 Improper Privilege Management	CVE-2026-45176	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

566	-		-	-	Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submittin…	CWE-284 Improper Access Control	CVE-2026-45177	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

567	-		-	-	Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credenti…	CWE-284 Improper Access Control	CVE-2026-45178	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

568	7.6	HIGH Network	-	-	An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC…	CWE-190 Integer Overflow or Wraparound	CVE-2026-11774	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

569	-		-	-	Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on V…	CWE-94 CWE-95 Code Injection Eval Injection	CVE-2026-47167	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

570	-		-	-	Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pyth…	CWE-94 CWE-95 CWE-829 Code Injection Eval Injection Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-52858	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed