Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132561 5.4 警告
Network 		MB CONNECT LINE mbCONNECT24
mymbCONNECT24 		MB CONNECT LINE 製 mymbCONNECT24 および mbCONNECT24 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-35563 2021-11-4 10:26 2020-07-16 Show GitHub Exploit DB Packet Storm
132562 7.5 重要
Network 		MB CONNECT LINE mbCONNECT24
mymbCONNECT24 		MB CONNECT LINE 製 mymbCONNECT24 および mbCONNECT24 におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2020-35564 2021-11-4 10:16 2020-07-16 Show GitHub Exploit DB Packet Storm
132563 9.8 緊急
Network 		MB CONNECT LINE mymbCONNECT24
mbCONNECT24 		MB CONNECT LINE 製 mymbCONNECT24 および mbCONNECT24 における過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2020-35565 2021-11-2 17:58 2020-07-16 Show GitHub Exploit DB Packet Storm
132564 4.3 警告
Network 		Wire Swiss GmbH Wire iOS 用 Wire における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2021-21301 2021-11-2 17:58 2021-02-2 Show GitHub Exploit DB Packet Storm
132565 7 重要
Local 		レッドハット
libpod project		 Red Hat OpenShift Container Platform
podman (旧 libpod)
Red Hat Enterprise Linux 		podman における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-20188 2021-11-2 17:58 2021-01-13 Show GitHub Exploit DB Packet Storm
132566 7.5 重要
Network 		Oclean Oclean Oclean における暗号アルゴリズムの使用に関する脆弱性 CWE-327
CWE-798
CVE-2020-25493 2021-11-2 17:58 2020-09-9 Show GitHub Exploit DB Packet Storm
132567 7.5 重要
Network 		Open vSwitch
Fedora Project
Debian		 Open vSwitch
Debian GNU/Linux
Fedora 		openvswitch におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2020-35498 2021-11-2 17:58 2020-12-17 Show GitHub Exploit DB Packet Storm
132568 2.7 低
Network 		レッドハット Single Sign-On
Keycloak
Red Hat OpenShift Application Runtimes
Red Hat JBoss Fuse 		Keycloak におけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2020-1717 2021-11-2 17:58 2020-01-30 Show GitHub Exploit DB Packet Storm
132569 5.4 警告
Network 		openSUSE project Open Build Service Open Build Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-8031 2021-11-2 17:58 2020-11-17 Show GitHub Exploit DB Packet Storm
132570 7.5 重要
Network 		is-user-valid is-user-valid is-user-valid におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2021-23335 2021-11-2 17:58 2021-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 - - - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an att… CWE-77
CWE-88
CWE-829
Command Injection
Argument Injection
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-46529 2026-06-12 23:16 2026-06-11 Show GitHub Exploit DB Packet Storm
502 7.0 HIGH
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerab… CWE-94
CWE-1321
Code Injection
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-44495 2026-06-12 23:16 2026-06-12 Show GitHub Exploit DB Packet Storm
503 7.5 HIGH
Network 		vmware spring_for_graphql The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are … CWE-284
Improper Access Control 		CVE-2026-41856 2026-06-12 23:14 2026-06-11 Show GitHub Exploit DB Packet Storm
504 8.1 HIGH
Network 		vmware spring_for_graphql Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page,… CWE-346
 Origin Validation Error 		CVE-2026-41700 2026-06-12 23:13 2026-06-11 Show GitHub Exploit DB Packet Storm
505 7.5 HIGH
Network 		sqlfluff sqlfluff SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be l… CWE-674
 Uncontrolled Recursion 		CVE-2026-46373 2026-06-12 23:10 2026-06-10 Show GitHub Exploit DB Packet Storm
506 7.5 HIGH
Network 		sqlfluff sqlfluff SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrusted users can provide SQL queries to be l… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46374 2026-06-12 23:01 2026-06-10 Show GitHub Exploit DB Packet Storm
507 7.5 HIGH
Network 		pipecat pipecat Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From version 0.0.90 to before version 1.2.0, a path traversal vulnerability exists in Pip… CWE-22
Path Traversal 		CVE-2026-44716 2026-06-12 23:00 2026-06-10 Show GitHub Exploit DB Packet Storm
508 6.5 MEDIUM
Network 		qnap file_station A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (… CWE-476
 NULL Pointer Dereference 		CVE-2026-22899 2026-06-12 22:49 2026-06-10 Show GitHub Exploit DB Packet Storm
509 6.5 MEDIUM
Network 		qnap file_station An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-24720 2026-06-12 22:49 2026-06-10 Show GitHub Exploit DB Packet Storm
510 4.4 MEDIUM
Local 		qnap license_center A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpect… CWE-22
Path Traversal 		CVE-2025-62851 2026-06-12 22:47 2026-06-10 Show GitHub Exploit DB Packet Storm