Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132931 7.8 重要
Local 		AnyDesk AnyDesk Windows 用 AnyDesk における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2020-35483 2021-09-27 17:56 2020-12-17 Show GitHub Exploit DB Packet Storm
132932 4.2 警告
Physics 		FEITIAN Technologies Co., Ltd.
NXP Semiconductors
Google		 3A081
J2A081
K40
K9
J2A081_M59
K21
A7005A
J2A081_M61
Titan Security Key
K13 		Google Titan Security Key におけるセキュリティ関連の処理に対するレスポンスの違いに起因する情報漏えいに関する脆弱性 CWE-203
セキュリティ関連の処理に対するレスポンスの違いに起因する情報漏えい 		CVE-2021-3011 2021-09-27 17:56 2021-01-7 Show GitHub Exploit DB Packet Storm
132933 4.3 警告
Network 		Apache Software Foundation Apache Guacamole Apache Guacamole における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2020-11997 2021-09-27 17:52 2020-04-21 Show GitHub Exploit DB Packet Storm
132934 5.4 警告
Network 		Fedora Project
Debian
Simple DirectMedia Layer		 Fedora
SDL
Debian GNU/Linux 		SDL における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2020-14410 2021-09-27 17:52 2020-06-18 Show GitHub Exploit DB Packet Storm
132935 7.8 重要
Local 		Fedora Project
Debian
Simple DirectMedia Layer		 Fedora
SDL
Debian GNU/Linux 		SDL における境界外書き込みに関する脆弱性 CWE-190
CWE-787
CVE-2020-14409 2021-09-27 17:52 2020-06-18 Show GitHub Exploit DB Packet Storm
132936 9.1 緊急
Network 		MISP project Malware Information Sharing Platform (MISP) MISP におけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2021-25323 2021-09-27 17:52 2021-01-19 Show GitHub Exploit DB Packet Storm
132937 7.5 重要
Network 		IBM IBM Planning Analytics IBM Planning Analytics における同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2020-4881 2021-09-27 17:52 2020-01-18 Show GitHub Exploit DB Packet Storm
132938 5.3 警告
Network 		IBM IBM Planning Analytics IBM Planning Analytics における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2020-4873 2021-09-27 17:52 2020-01-18 Show GitHub Exploit DB Packet Storm
132939 5.5 警告
Local 		IBM IBM Planning Analytics IBM Planning Analytics における重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2020-4871 2021-09-27 17:52 2020-01-18 Show GitHub Exploit DB Packet Storm
132940 8.8 重要
Network 		Zoho Corporation ManageEngine Applications Manager Zoho ManageEngine Applications Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2020-27733 2021-09-27 17:52 2020-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 2.7 LOW
Network 		element synapse Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full h… Update CWE-20
 Improper Input Validation  		CVE-2026-45076 2026-06-5 03:04 2026-05-29 Show GitHub Exploit DB Packet Storm
52 9.9 CRITICAL
Network 		flowintel flowintel FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can submit an external… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-9813 2026-06-5 03:03 2026-05-28 Show GitHub Exploit DB Packet Storm
53 5.4 MEDIUM
Network 		appsmith appsmith Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Developer to inject persistent XSS by a … New CWE-79
Cross-site Scripting 		CVE-2026-7299 2026-06-5 02:41 2026-06-3 Show GitHub Exploit DB Packet Storm
54 6.5 MEDIUM
Adjacent 		tp-link tapo_c200_firmware TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted … New CWE-121
Stack-based Buffer Overflow 		CVE-2026-1871 2026-06-5 02:41 2026-06-3 Show GitHub Exploit DB Packet Storm
55 7.8 HIGH
Local 		nvidia nvtabular NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampe… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24221 2026-06-5 02:41 2026-06-3 Show GitHub Exploit DB Packet Storm
56 7.8 HIGH
Local 		nvidia nvtabular NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampe… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24237 2026-06-5 02:40 2026-06-3 Show GitHub Exploit DB Packet Storm
57 6.1 MEDIUM
Physics 		dell thinos Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerabilit… New CWE-284
Improper Access Control 		CVE-2026-40713 2026-06-5 02:37 2026-06-3 Show GitHub Exploit DB Packet Storm
58 7.8 HIGH
Local 		dell thinos Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, le… New CWE-284
Improper Access Control 		CVE-2026-40715 2026-06-5 02:29 2026-06-3 Show GitHub Exploit DB Packet Storm
59 7.5 HIGH
Network 		mozilla firefox Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3. New CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-10701 2026-06-5 02:25 2026-06-3 Show GitHub Exploit DB Packet Storm
60 - - - Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661), or non-digits, wh… New CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-49942 2026-06-5 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm