Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132821 9.8 緊急
Network 		OctoberCMS October October におけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2021-3311 2021-10-19 17:56 2021-01-30 Show GitHub Exploit DB Packet Storm
132822 7.8 重要
Local 		SoftMaker SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 SoftMaker Office 2021 PlanMaker における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2020-13580 2021-10-19 17:56 2020-11-2 Show GitHub Exploit DB Packet Storm
132823 7.8 重要
Local 		SoftMaker SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 SoftMaker Office 2021 PlanMaker における整数オーバーフローの脆弱性 CWE-190
CWE-787
CVE-2020-13579 2021-10-19 17:56 2020-11-2 Show GitHub Exploit DB Packet Storm
132824 6.5 警告
Network 		SquaredUp SquaredUp SquaredUp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2020-9388 2021-10-19 17:56 2020-02-25 Show GitHub Exploit DB Packet Storm
132825 7.5 重要
Network 		Eclipse Foundation Californium Eclipse Californium における脆弱性 CWE-Other
その他 		CVE-2020-27222 2021-10-19 17:56 2020-10-19 Show GitHub Exploit DB Packet Storm
132826 6.3 警告
Network 		ApexCharts apexcharts apexcharts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-23327 2021-10-19 17:56 2021-01-14 Show GitHub Exploit DB Packet Storm
132827 9.8 緊急
Network 		ASUSTeK Computer Inc. RT-AX86U ファームウェア ASUS RT-AX86U ルータファームウェアにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2020-36109 2021-10-19 17:47 2021-02-1 Show GitHub Exploit DB Packet Storm
132828 6.1 警告
Network 		oauth2_proxy project oauth2_proxy OAuth2 Proxy におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2021-21291 2021-10-19 17:23 2021-02-2 Show GitHub Exploit DB Packet Storm
132829 8.3 重要
Network 		Debian
Mechanize project
Fedora Project		 Mechanize
Fedora
Debian GNU/Linux 		Mechanize における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2021-21289 2021-10-19 17:23 2021-02-2 Show GitHub Exploit DB Packet Storm
132830 5.9 警告
Network 		libpod project podman (旧 libpod) Podman における同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2021-20199 2021-10-19 17:23 2021-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
391 - - - QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version: New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2025-59382 2026-06-10 12:16 2026-06-10 Show GitHub Exploit DB Packet Storm
392 - - - A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities… New CWE-352
 Origin Validation Error 		CVE-2025-58468 2026-06-10 12:16 2026-06-10 Show GitHub Exploit DB Packet Storm
393 4.6 MEDIUM
Adjacent 		- - ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0, an out-of-bounds read exists in the BlueDroid AVRCP vendor-command parser (av… New CWE-125
Out-of-bounds Read 		CVE-2026-46532 2026-06-10 11:16 2026-06-10 Show GitHub Exploit DB Packet Storm
394 7.1 HIGH
Adjacent 		- - ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exists in the Security Scheme 2 (SRP6a) session-setup … New CWE-122
Heap-based Buffer Overflow 		CVE-2026-45542 2026-06-10 11:16 2026-06-10 Show GitHub Exploit DB Packet Storm
395 7.5 HIGH
Network 		- - ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference exists in the WebSocket subprotocol-negotiation pa… New CWE-476
 NULL Pointer Dereference 		CVE-2026-45541 2026-06-10 11:16 2026-06-10 Show GitHub Exploit DB Packet Storm
396 7.1 HIGH
Local 		- - ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c val… New CWE-20
CWE-125
CWE-200
 Improper Input Validation 
Out-of-bounds Read
Information Exposure 		CVE-2026-45329 2026-06-10 11:16 2026-06-10 Show GitHub Exploit DB Packet Storm
397 9.3 CRITICAL
Local 		- - ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c and esp_secure_servi… New CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write 		CVE-2026-45328 2026-06-10 11:16 2026-06-10 Show GitHub Exploit DB Packet Storm
398 6.5 MEDIUM
Adjacent 		- - ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read flaw exists in the DHCP server option parser (parse_o… New CWE-125
Out-of-bounds Read 		CVE-2026-45160 2026-06-10 11:16 2026-06-10 Show GitHub Exploit DB Packet Storm
399 5.4 MEDIUM
Network 		- - WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title … Update CWE-79
Cross-site Scripting 		CVE-2019-25744 2026-06-10 11:16 2026-06-4 Show GitHub Exploit DB Packet Storm
400 5.4 MEDIUM
Network 		- - WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting script tags in the post title fiel… Update CWE-79
Cross-site Scripting 		CVE-2019-25743 2026-06-10 11:16 2026-06-4 Show GitHub Exploit DB Packet Storm