Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 12:22 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
132601	7.5	重要 Network	Homey	Homey ファームウェア Homey Pro ファームウェア	Athom Homey および Homey Pro デバイスにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2020-28952	2021-11-24 10:36	2020-11-19	Show	GitHub Exploit DB Packet Storm

132602	5.5	警告 Local	Fabrice Bellard	QEMU	QEMU における無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2021-20255	2021-11-24 09:58	2021-02-19	Show	GitHub Exploit DB Packet Storm

132603	6.7	警告 Local	マカフィー	Endpoint Product Removal Tool	McAfee Endpoint Product Removal Tool における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2021-23879	2021-11-22 18:10	2021-03-9	Show	GitHub Exploit DB Packet Storm

132604	4.9	警告 Network	SonicWALL	SMA100 ファームウェア	SonicWall SMA100 における認証に関する脆弱性	CWE-287 不適切な認証	CVE-2021-20018	2021-11-22 18:10	2021-03-13	Show	GitHub Exploit DB Packet Storm

132605	8.8	重要 Network	SonicWALL	SMA100 ファームウェア	SonicWall SMA100 における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2021-20017	2021-11-22 18:10	2021-03-13	Show	GitHub Exploit DB Packet Storm

132606	7.8	重要 Local	デル	Dell SupportAssist Client ProManage Dell SupportAssist for Business PCs Dell SupportAssist for Home PCs	複数の Dell SupportAssist Client 製品における制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2021-21518	2021-11-22 18:10	2021-03-10	Show	GitHub Exploit DB Packet Storm

132607	2.3	低 Local	ZTE	ZXONE 8700 ファームウェア ZXONE 9700 ファームウェア ZXONE 19700 ファームウェア	複数の ZXONE 製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2021-21726	2021-11-22 18:10	2021-03-10	Show	GitHub Exploit DB Packet Storm

132608	8.8	重要 Network	Vesta Control Panel myVesta Control Panel	myVesta Vesta Control Panel	Vesta Control Panel および myVesta における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2021-28379	2021-11-22 18:10	2021-03-15	Show	GitHub Exploit DB Packet Storm

132609	6.5	警告 Network	Cloudera, Inc.	Cloudera Data Engineering	Cloudera Data Engineering における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2021-3167	2021-11-22 18:06	2021-01-21	Show	GitHub Exploit DB Packet Storm

132610	6.1	警告 Network	Linux Foundation	Argo Continuous Delivery	Argo CD におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-26924	2021-11-22 18:06	2021-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1221	-		-	-	Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credenti…	CWE-284 Improper Access Control	CVE-2026-45178	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1222	7.6	HIGH Network	-	-	An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC…	CWE-190 Integer Overflow or Wraparound	CVE-2026-11774	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1223	6.5	MEDIUM Network	-	-	An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gst_h266_parser_parse_picture_partiti…	CWE-787 Out-of-bounds Write	CVE-2026-53701	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1224	6.5	MEDIUM Network	-	-	A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from…	CWE-787 Out-of-bounds Write	CVE-2026-53702	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1225	-		-	-	Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security c…	CWE-295 Improper Certificate Validation	CVE-2026-45175	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1226	-		-	-	FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. Prior to version 2.6.7, an attacker can upload a small, malicious PD…	CWE-400 CWE-770 Uncontrolled Resource Consumption Allocation of Resources Without Limits or Throttling	CVE-2026-45802	2026-06-12 05:51	2026-06-12	Show	GitHub Exploit DB Packet Storm

1227	5.3	MEDIUM Network	-	-	CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-downgrade redirects to …	CWE-522 Insufficiently Protected Credentials	CVE-2026-49949	2026-06-12 05:50	2026-06-12	Show	GitHub Exploit DB Packet Storm

1228	4.3	MEDIUM Network	-	-	Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missi…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-53781	2026-06-12 05:50	2026-06-12	Show	GitHub Exploit DB Packet Storm

1229	7.4	HIGH Network	-	-	Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresse…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-53782	2026-06-12 05:50	2026-06-12	Show	GitHub Exploit DB Packet Storm

1230	9.1	CRITICAL Network	-	-	Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by n…	CWE-93 CRLF Injection	CVE-2026-50638	2026-06-12 05:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed