Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133061 7.8 重要
Local 		Google Android Android における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2021-0306 2021-09-22 16:14 2021-01-4 Show GitHub Exploit DB Packet Storm
133062 5.5 警告
Local 		Google Android Android における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2021-0304 2021-09-22 16:14 2021-01-4 Show GitHub Exploit DB Packet Storm
133063 7 重要
Local 		Google Android Android における解放済みメモリの使用に関する脆弱性 CWE-362
CWE-416
CVE-2021-0303 2021-09-22 16:14 2021-01-4 Show GitHub Exploit DB Packet Storm
133064 6.7 警告
Local 		Google Android Android における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2021-0301 2021-09-22 16:14 2021-01-4 Show GitHub Exploit DB Packet Storm
133065 9.8 緊急
Network 		Google Android Android における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2020-0471 2021-09-22 16:14 2021-01-4 Show GitHub Exploit DB Packet Storm
133066 6.7 警告
Local 		Google Android Android における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-0342 2021-09-22 16:14 2021-01-4 Show GitHub Exploit DB Packet Storm
133067 7.8 重要
Local 		Google Android Android におけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2020-27059 2021-09-22 16:14 2020-10-12 Show GitHub Exploit DB Packet Storm
133068 9.1 緊急
Network 		Red Lion Controls, Inc. Crimson Crimson における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2020-27285 2021-09-22 15:47 2020-10-19 Show GitHub Exploit DB Packet Storm
133069 6.1 警告
Network 		Elementor Elementor Website Builder WordPress 用 Elementor Website Builder プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-36171 2021-09-22 15:39 2020-11-25 Show GitHub Exploit DB Packet Storm
133070 6.1 警告
Network 		Advanced Custom Fields Advanced Custom Fields WordPress 用 Advanced Custom Fields プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-36172 2021-09-22 15:35 2020-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 6.3 MEDIUM
Network 		- - A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This impacts the function session_start of the file /… New CWE-384
 Session Fixation 		CVE-2026-11335 2026-06-6 01:04 2026-06-6 Show GitHub Exploit DB Packet Storm
182 - - - Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in damasac thaipalliative_lte through version 3.0 allow remote attackers to inject arbitrary web script or HTML via the idFormMain parame… New - CVE-2026-38579 2026-06-6 01:04 2026-06-6 Show GitHub Exploit DB Packet Storm
183 5.3 MEDIUM
Network 		- - quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory allocation in quic-go's HTTP/3 client and server implementations by sending a … New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-40898 2026-06-6 01:01 2026-06-5 Show GitHub Exploit DB Packet Storm
184 7.2 HIGH
Local 		- - Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/arc… New CWE-427
 Uncontrolled Search Path Element 		CVE-2026-41567 2026-06-6 01:01 2026-06-5 Show GitHub Exploit DB Packet Storm
185 4.3 MEDIUM
Network 		- - 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer ove… New CWE-125
Out-of-bounds Read 		CVE-2026-48092 2026-06-6 01:01 2026-06-6 Show GitHub Exploit DB Packet Storm
186 8.8 HIGH
Network 		- - 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCu… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-48095 2026-06-6 01:01 2026-06-6 Show GitHub Exploit DB Packet Storm
187 - - - The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not verify that a cryptograp… New CWE-325
 Missing Required Cryptographic Step 		CVE-2026-48480 2026-06-6 01:00 2026-06-5 Show GitHub Exploit DB Packet Storm
188 4.7 MEDIUM
Network 		- - Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redir… New CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-42329 2026-06-6 01:00 2026-06-5 Show GitHub Exploit DB Packet Storm
189 6.3 MEDIUM
Network 		- - IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. The application ca… New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-42538 2026-06-6 01:00 2026-06-5 Show GitHub Exploit DB Packet Storm
190 8.2 HIGH
Network 		- - CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow (`.github/workflows/static.yml`) uses the `pull_request_target` trigger but dan… New CWE-94
Code Injection 		CVE-2026-41249 2026-06-6 01:00 2026-06-5 Show GitHub Exploit DB Packet Storm