Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
132961 8.1 重要
Network
Wekan project Wekan Wekan における証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2021-3309 2021-10-13 13:48 2021-01-26 Show GitHub Exploit DB Packet Storm
132962 3.3
Local
アドビシステムズ Adobe Acrobat Reader DC
Adobe Acrobat
Adobe Acrobat DC
Adobe Reader および Acrobat における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2021-21089 2021-10-13 12:26 2021-02-9 Show GitHub Exploit DB Packet Storm
132963 9.1 緊急
Network
日立
json-smart
Hitachi Ops Center Common Services
json-smart-v2
json-smart-v1
netplex json-smart-v1 および json-smart-v2 における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2021-27568 2021-10-12 18:02 2021-02-23 Show GitHub Exploit DB Packet Storm
132964 7.5 重要
Network
日立
レッドハット
Hitachi Ops Center Common Services
Keycloak
Keycloak における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2021-20222 2021-10-12 18:02 2021-02-3 Show GitHub Exploit DB Packet Storm
132965 7.5 重要
Network
日立
Apache Software Foundation
Hitachi Ops Center Common Services
Apache CXF
Apache CXF におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2021-22696 2021-10-12 18:02 2021-04-2 Show GitHub Exploit DB Packet Storm
132966 5.9 警告
Network
インターネット技術タスクフォース (IETF)
microchip
Microchip Libraries for Applications
Public-Key Cryptography Standards (PKCS) #1
Microchip Libraries for Applications の RSA 用 PKCS #1 パディングにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2020-20950 2021-10-12 18:02 2020-08-13 Show GitHub Exploit DB Packet Storm
132967 5.4 警告
Network
日立
レッドハット
Hitachi Ops Center Common Services
Keycloak
keycloak における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2020-1725 2021-10-12 18:02 2019-10-24 Show GitHub Exploit DB Packet Storm
132968 4.3 警告
Network
日立
レッドハット
Hitachi Ops Center Common Services
Red Hat Mobile Application Platform
Red Hat Mobile Aplication Platform におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2020-1723 2021-10-12 18:02 2019-11-8 Show GitHub Exploit DB Packet Storm
132969 8.8 重要
Network
Mission Labs SmartAgent SmartAgent における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2021-3165 2021-10-12 17:52 2021-01-12 Show GitHub Exploit DB Packet Storm
132970 6.7 警告
Local
Google Android Android における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2021-0365 2021-10-12 17:33 2021-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 4.3 MEDIUM
Network
- - The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.4.16. This is due to the plugin not properly verifying that a user i… New CWE-862
 Missing Authorization
CVE-2026-7624 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm
332 5.3 MEDIUM
Network
- - The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.96.6. This is due to missing ownership v… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-8839 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm
333 8.8 HIGH
Network
- - A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stac… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-11413 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm
334 2.4 LOW
Network
- - A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cross site scripting.… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-11434 2026-06-8 23:57 2026-06-7 Show GitHub Exploit DB Packet Storm
335 7.3 HIGH
Network
- - A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The at… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-11435 2026-06-8 23:57 2026-06-7 Show GitHub Exploit DB Packet Storm
336 5.3 MEDIUM
Network
- - The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and including, 2.5.0. This is due … New CWE-117
 Improper Output Neutralization for Logs
CVE-2026-9016 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm
337 4.4 MEDIUM
Network
- - The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'location_messages' parameter in all… New CWE-79
Cross-site Scripting
CVE-2026-9594 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm
338 6.5 MEDIUM
Network
- - The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'compact_album_order_by' Shortcode Parameter in all versions up to, and i… New CWE-89
SQL Injection
CVE-2026-9829 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm
339 7.2 HIGH
Network
- - The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, and including, 1.7.16. This is due to a missing capability check on the 'updateU… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-9851 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm
340 6.3 MEDIUM
Network
- - A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. This manipulation caus… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-11406 2026-06-8 23:57 2026-06-6 Show GitHub Exploit DB Packet Storm