Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
132801 7.8 重要
Local
Linux
Fedora Project
Fedora
Linux Kernel
Linux kernel における脆弱性 CWE-noinfo
情報不足
CVE-2021-26934 2021-11-4 18:02 2021-02-16 Show GitHub Exploit DB Packet Storm
132802 6.1 警告
Network
Secomea SiteManager Embedded SiteManager-Embedded におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2020-29025 2021-11-4 17:53 2020-11-24 Show GitHub Exploit DB Packet Storm
132803 5.5 警告
Local
NFStream nfstream NFStream における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如
CVE-2020-25340 2021-11-4 17:53 2020-08-28 Show GitHub Exploit DB Packet Storm
132804 9.8 緊急
Network
SDG Technologies Plug and Play SCADA PNPSCADA における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2020-24841 2021-11-4 17:53 2020-08-17 Show GitHub Exploit DB Packet Storm
132805 9.8 緊急
Network
CITSmart CITSmart CITSmart におけるインジェクションに関する脆弱性 CWE-74
インジェクション
CVE-2020-35775 2021-11-4 17:53 2020-12-29 Show GitHub Exploit DB Packet Storm
132806 4.8 警告
Network
F5 Networks BIG-IP Application Security Manager (ASM)
BIG-IP Access Policy Manager (APM)
BIG-IP Advanced Web Application Firewall (WAF)
B…
BIG-IP における脆弱性 CWE-noinfo
情報不足
CVE-2021-22981 2021-11-4 17:52 2021-02-11 Show GitHub Exploit DB Packet Storm
132807 7.5 重要
Network
The PHP Group
Debian
NetApp
PHP
Clustered Data ONTAP
Debian GNU/Linux
PHP における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2021-21702 2021-11-4 17:52 2021-01-26 Show GitHub Exploit DB Packet Storm
132808 5.3 警告
Network
The PHP Group
Debian
NetApp
PHP
Clustered Data ONTAP
Debian GNU/Linux
PHP における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2020-7071 2021-11-4 17:52 2020-01-15 Show GitHub Exploit DB Packet Storm
132809 6.1 警告
Network
Atlassian JIRA
Jira Software Data Center
Atlassian Jira Server および Data Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2020-36236 2021-11-4 17:52 2021-01-21 Show GitHub Exploit DB Packet Storm
132810 7.1 重要
Local
TP-LINK Technologies Archer C5v ファームウェア TP-Link Archer C5v における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信
CVE-2021-27209 2021-11-4 17:52 2021-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.7 MEDIUM
Local
- - A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges … CWE-122
Heap-based Buffer Overflow
CVE-2026-48914 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
622 - - - A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remedia… CWE-325
 Missing Required Cryptographic Step
CVE-2026-9266 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
623 8.7 HIGH
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combined with the bridge's… CWE-693
 Protection Mechanism Failure
CVE-2026-47135 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
624 10.0 CRITICAL
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: t… CWE-913
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-47137 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
625 8.6 HIGH
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target o… CWE-693
 Protection Mechanism Failure
CVE-2026-47209 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
626 8.0 HIGH
Network
microsoft sharepoint_server Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-285
Improper Authorization
CVE-2026-47298 2026-06-13 01:00 2026-06-10 Show GitHub Exploit DB Packet Storm
627 8.8 HIGH
Network
- - The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operat… CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-12059 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
628 6.5 MEDIUM
Network
- - Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim … CWE-749
 Exposed Dangerous Method or Function
CVE-2026-12060 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
629 4.9 MEDIUM
Network
- - The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended director… CWE-22
Path Traversal
CVE-2026-11844 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
630 7.2 HIGH
Network
- - The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute … CWE-78
OS Command 
CVE-2026-11845 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm