Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132961 8.6 重要
Local 		アドビシステムズ Adobe Photoshop Adobe Photoshop におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2021-21006 2021-09-17 16:58 2021-01-12 Show GitHub Exploit DB Packet Storm
132962 6.7 警告
Local 		Huawei SMC2.0 ファームウェア SMC2.0 における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2020-9209 2021-09-17 16:58 2020-12-30 Show GitHub Exploit DB Packet Storm
132963 6.5 警告
Adjacent 		Huawei S2700 ファームウェア
S12700 ファームウェア
S5700 ファームウェア
S7700 ファームウェア
USG9500 ファームウェア
NIP6800 ファームウェア
S6700 ファームウェア
Secospace USG6600 ファームウェア
S… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2020-1866 2021-09-17 16:58 2020-01-22 Show GitHub Exploit DB Packet Storm
132964 6.5 警告
Adjacent 		Huawei CloudEngine 6800 ファームウェア
CloudEngine 12800 ファームウェア
CloudEngine 7800 ファームウェア
CloudEngine 5800 ファームウェア 		複数の Huawei 製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2020-1865 2021-09-17 16:58 2020-12-30 Show GitHub Exploit DB Packet Storm
132965 7.2 重要
Network 		Xiaomi Mi RM1800 ファームウェア
Mi AX1800 ファームウェア 		Xiaomi router AX1800rom および Xiaomi route RM1800 root におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2020-14102 2021-09-17 16:58 2020-06-15 Show GitHub Exploit DB Packet Storm
132966 7.5 重要
Network 		Xiaomi Mi RM1800 ファームウェア
Mi AX1800 ファームウェア 		Xiaomi router AX1800rom および Xiaomi route RM1800 root における脆弱性 CWE-noinfo
情報不足 		CVE-2020-14101 2021-09-17 16:58 2020-06-15 Show GitHub Exploit DB Packet Storm
132967 7.5 重要
Network 		Xiaomi Mi RM1800 ファームウェア
Mi AX1800 ファームウェア 		Xiaomi router AX1800rom および Xiaomi route RM1800 root における不適切な同期に関する脆弱性 CWE-662
不適切な同期 		CVE-2020-14098 2021-09-17 16:58 2020-06-15 Show GitHub Exploit DB Packet Storm
132968 7.5 重要
Network 		Xiaomi Redmi AX6 ファームウェア Xiaomi router AX6 ROM における脆弱性 CWE-noinfo
情報不足 		CVE-2020-14097 2021-09-17 16:58 2020-06-15 Show GitHub Exploit DB Packet Storm
132969 5 警告
Local 		ジュニパーネットワークス Contrail Networking Juniper Networks Contrail Networking における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2021-0212 2021-09-17 16:55 2021-01-13 Show GitHub Exploit DB Packet Storm
132970 10 緊急
Network 		ジュニパーネットワークス Junos OS Juniper Networks Junos OS および Junos OS Evolved Routing Protocol Daemon サービスにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2021-0211 2021-09-17 16:55 2021-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 3.6 LOW
Local 		lfprojects mlflow A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipu… New CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash 		CVE-2026-10803 2026-06-5 03:24 2026-06-4 Show GitHub Exploit DB Packet Storm
32 7.5 HIGH
Network 		- - Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no … New - CVE-2026-8881 2026-06-5 03:16 2026-06-4 Show GitHub Exploit DB Packet Storm
33 7.4 HIGH
Local 		- - In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution New CWE-93
CRLF Injection 		CVE-2026-50292 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
34 2.2 LOW
Network 		- - In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("n… New CWE-863
 Incorrect Authorization 		CVE-2026-50266 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
35 9.1 CRITICAL
Network 		- - Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on Java/JVM platforms allows a remote attacker to bypass class registration, TypeChec… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-50076 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
36 6.5 MEDIUM
Network 		- - Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This… New CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-49940 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
37 - - - The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. When deriving native memory addresses… New CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-48040 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
38 7.4 HIGH
Network 		- - An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When ssl… New CWE-297
 Improper Validation of Certificate with Host Mismatch 		CVE-2026-44393 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
39 9.9 CRITICAL
Network 		- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public `/image/<hash>` route that resolves attacker-controlled entries from `image_has… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43986 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
40 8.9 HIGH
Network 		- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `log_js_errors` to any authenticated user, including guest users when guest access is en… New CWE-79
Cross-site Scripting 		CVE-2026-43984 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm