Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133081 3.7 低
Network 		thekelleys
Fedora Project
Debian		 Debian GNU/Linux
Fedora
Dnsmasq 		dnsmasq におけるセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック 		CVE-2020-25684 2021-10-4 17:30 2020-10-20 Show GitHub Exploit DB Packet Storm
133082 6.1 警告
Network 		Vtiger Vtiger CRM Vtiger CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-19362 2021-10-4 17:24 2020-08-13 Show GitHub Exploit DB Packet Storm
133083 6.5 警告
Network 		Vtiger Vtiger CRM Vtiger CRM における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2020-19363 2021-10-4 16:58 2020-08-13 Show GitHub Exploit DB Packet Storm
133084 8.8 重要
Network 		OpenEMR OpenEMR OpenEMR における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2020-19364 2021-10-4 16:48 2020-06-23 Show GitHub Exploit DB Packet Storm
133085 6.1 警告
Network 		Nagios Enterprises, LLC Nagios Log Server Nagios Log Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-25385 2021-10-4 16:26 2020-09-14 Show GitHub Exploit DB Packet Storm
133086 5.4 警告
Network 		FolioVision FV Flowplayer Video Player WordPress 用 FV Flowplayer Video Player プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-35748 2021-10-4 15:52 2020-12-28 Show GitHub Exploit DB Packet Storm
133087 7.7 重要
Network 		PressTigers Simple Job Board WordPress 用 Simple Board Job プラグインにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2020-35749 2021-10-4 15:40 2020-12-28 Show GitHub Exploit DB Packet Storm
133088 6.5 警告
Network 		シーメンス SCALANCE X307-3 ファームウェア
SCALANCE X308-2 ファームウェア
SCALANCE X308-2LD ファームウェア
SCALANCE X201-3PIRT ファームウェア
SCALANCE X202-2IRT ファームウェア
SCALA… 		SCALANCE X-200 および SCALANCE X-200IRT スイッチファミリにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2020-15799 2021-10-4 14:21 2020-07-15 Show GitHub Exploit DB Packet Storm
133089 7.2 重要
Network 		OpenMage OpenMage LTS OpenMage におけるパストラバーサルの脆弱性 CWE-22
CWE-434
CVE-2020-26295 2021-10-1 17:56 2020-10-1 Show GitHub Exploit DB Packet Storm
133090 7.2 重要
Network 		OpenMage OpenMage LTS OpenMage におけるパストラバーサルの脆弱性 CWE-22
CWE-434
CVE-2020-26285 2021-10-1 17:56 2020-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 8.8 HIGH
Network 		google chrome Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) New CWE-787
 Out-of-bounds Write 		CVE-2026-10883 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
352 8.8 HIGH
Network 		google chrome Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free 		CVE-2026-10882 2026-06-6 02:41 2026-06-5 Show GitHub Exploit DB Packet Storm
353 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative/amplification effe… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-47707 2026-06-6 02:38 2026-06-5 Show GitHub Exploit DB Packet Storm
354 5.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter extension is vulnerable to an Application-level DOS due to a lack of cycle detecti… Update CWE-400
CWE-674
 Uncontrolled Resource Consumption
 Uncontrolled Recursion 		CVE-2026-47706 2026-06-6 02:37 2026-06-5 Show GitHub Exploit DB Packet Storm
355 7.3 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into an array reference… Update CWE-843
Type Confusion 		CVE-2026-9334 2026-06-6 02:36 2026-06-3 Show GitHub Exploit DB Packet Storm
356 7.5 HIGH
Network 		rurban cpanel\ Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decode_json() advances t… Update CWE-755
CWE-763
 Improper Handling of Exceptional Conditions
 Release of Invalid Pointer or Reference 		CVE-2026-9516 2026-06-6 02:35 2026-06-3 Show GitHub Exploit DB Packet Storm
357 - - - A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input.  Crafted inputs can trigger a processing error… New CWE-20
 Improper Input Validation  		CVE-2026-8714 2026-06-6 02:17 2026-06-6 Show GitHub Exploit DB Packet Storm
358 5.8 MEDIUM
Network 		- - On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is … New CWE-1023
 Incomplete Comparison with Missing Factors 		CVE-2026-7473 2026-06-6 02:17 2026-06-6 Show GitHub Exploit DB Packet Storm
359 6.5 MEDIUM
Network 		- - 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in… New CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2026-48112 2026-06-6 02:16 2026-06-6 Show GitHub Exploit DB Packet Storm
360 4.3 MEDIUM
Network 		- - 7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmwar… New CWE-125
Out-of-bounds Read 		CVE-2026-48111 2026-06-6 02:16 2026-06-6 Show GitHub Exploit DB Packet Storm