Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
132891	4.3	警告 Network	レッドハット Fedora Project PostgreSQL.org	PostgreSQL Red Hat Enterprise Linux Fedora Red Hat Software Collections	PostgreSQL における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2021-20229	2021-11-9 17:07	2021-02-11	Show	GitHub Exploit DB Packet Storm

132892	8.1	重要 Network	レッドハット	OpenShift Installer	OpenShift Installer における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2021-20198	2021-11-9 17:07	2021-01-27	Show	GitHub Exploit DB Packet Storm

132893	6.5	警告 Network	アルバネットワークス株式会社	ClearPass Policy Manager	Aruba ClearPass Policy Manager における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2021-26685	2021-11-9 17:07	2021-02-16	Show	GitHub Exploit DB Packet Storm

132894	7.5	重要 Network	stunnel	stunnel	stunnel における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2021-20230	2021-11-9 17:07	2021-02-4	Show	GitHub Exploit DB Packet Storm

132895	5.4	警告 Network	FastAdmin	FastAdmin	fastadmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-26609	2021-11-9 17:07	2020-10-7	Show	GitHub Exploit DB Packet Storm

132896	9.8	緊急 Network	Google	Android	quram library における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-25346	2021-11-9 16:32	2021-03-4	Show	GitHub Exploit DB Packet Storm

132897	9.8	緊急 Network	nano_arena project	nano_arena	Rust 用 nano_arena crate における脆弱性	CWE-Other その他	CVE-2021-28032	2021-11-9 16:15	2021-01-31	Show	GitHub Exploit DB Packet Storm

132898	7.8	重要 Local	Joint Photographic Experts Group	jpeg-xl	jpeg-xl における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-28026	2021-11-9 16:04	2021-03-5	Show	GitHub Exploit DB Packet Storm

132899	8.1	重要 Network	xmlhttprequest project	xmlhttprequest	xmlhttprequest におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2020-28502	2021-11-9 15:39	2020-11-12	Show	GitHub Exploit DB Packet Storm

132900	5.7	警告 Adjacent	ownCloud	ownCloud	ownCloud Server における不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2020-36252	2021-11-9 15:16	2020-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1221	-		-	-	Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credenti…	CWE-284 Improper Access Control	CVE-2026-45178	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1222	7.6	HIGH Network	-	-	An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC…	CWE-190 Integer Overflow or Wraparound	CVE-2026-11774	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1223	6.5	MEDIUM Network	-	-	An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gst_h266_parser_parse_picture_partiti…	CWE-787 Out-of-bounds Write	CVE-2026-53701	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1224	6.5	MEDIUM Network	-	-	A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from…	CWE-787 Out-of-bounds Write	CVE-2026-53702	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1225	-		-	-	Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security c…	CWE-295 Improper Certificate Validation	CVE-2026-45175	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

1226	-		-	-	FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. Prior to version 2.6.7, an attacker can upload a small, malicious PD…	CWE-400 CWE-770 Uncontrolled Resource Consumption Allocation of Resources Without Limits or Throttling	CVE-2026-45802	2026-06-12 05:51	2026-06-12	Show	GitHub Exploit DB Packet Storm

1227	5.3	MEDIUM Network	-	-	CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-downgrade redirects to …	CWE-522 Insufficiently Protected Credentials	CVE-2026-49949	2026-06-12 05:50	2026-06-12	Show	GitHub Exploit DB Packet Storm

1228	4.3	MEDIUM Network	-	-	Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missi…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-53781	2026-06-12 05:50	2026-06-12	Show	GitHub Exploit DB Packet Storm

1229	7.4	HIGH Network	-	-	Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresse…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-53782	2026-06-12 05:50	2026-06-12	Show	GitHub Exploit DB Packet Storm

1230	9.1	CRITICAL Network	-	-	Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by n…	CWE-93 CRLF Injection	CVE-2026-50638	2026-06-12 05:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed