Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
133131 5.3 警告
Network
OnlineVotingSystem project OnlineVotingSystem OnlineVotingSystem における Salt を使用しない一方向ハッシュの使用に関する脆弱性 CWE-759
Salt を使用しない一方向ハッシュの使用
CVE-2021-21253 2021-10-13 17:28 2021-01-16 Show GitHub Exploit DB Packet Storm
133132 7.7 重要
Network
ORAS ORAS ORAS におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2021-21272 2021-10-13 17:14 2021-01-23 Show GitHub Exploit DB Packet Storm
133133 5.4 警告
Network
PRYANIKY PRYANIKY Pryaniki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2021-3395 2021-10-13 17:10 2021-02-3 Show GitHub Exploit DB Packet Storm
133134 7.5 重要
Network
MIT Kerberos krb5-appl MIT krb5-appl における脆弱性 CWE-noinfo
情報不足
CVE-2019-25018 2021-10-13 17:10 2019-04-1 Show GitHub Exploit DB Packet Storm
133135 4.3 警告
Network
IBM IBM Content Navigator IBM Content Navigator におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2020-4934 2021-10-13 17:10 2021-02-1 Show GitHub Exploit DB Packet Storm
133136 9.8 緊急
Network
D-Link Systems, Inc. DSR-250 ファームウェア
DSR-1000N ファームウェア
D-Link DSR-250 および DSR-1000N における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2020-18568 2021-10-13 17:10 2020-07-3 Show GitHub Exploit DB Packet Storm
133137 9.8 緊急
Network
D-Link Systems, Inc. D-Link DNS-320 ファームウェア D-Link DNS-320 FW における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2020-25506 2021-10-13 17:10 2020-07-16 Show GitHub Exploit DB Packet Storm
133138 8.8 重要
Network
UCOPIA UCOPIA Wireless Appliance UCOPIA Wireless Appliance における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2020-25036 2021-10-13 17:10 2020-08-31 Show GitHub Exploit DB Packet Storm
133139 8.2 重要
Local
UCOPIA UCOPIA Wireless Appliance UCOPIA Wi-Fi appliances における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2020-25037 2021-10-13 17:10 2020-08-31 Show GitHub Exploit DB Packet Storm
133140 6.7 警告
Local
UCOPIA Ucopia Express wireless appliance UCOPIA Wi-Fi appliances における脆弱性 CWE-noinfo
情報不足
CVE-2020-25035 2021-10-13 17:10 2020-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 6.5 MEDIUM
Network
- - GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). bThis vulnerability allows attackers to cause a Denial of… New CWE-1077
 Floating Point Comparison with Incorrect Operator
CVE-2025-55658 2026-06-10 07:16 2026-06-10 Show GitHub Exploit DB Packet Storm
472 7.8 HIGH
Local
- - Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerab… New - CVE-2026-8863 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
473 6.3 MEDIUM
Network
- - SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms_user.php. New CWE-352
 Origin Validation Error
CVE-2026-39170 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
474 7.5 HIGH
Network
- - SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php. New CWE-284
Improper Access Control
CVE-2026-39169 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
475 7.5 HIGH
Network
- - Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. This vulnerability allows attackers to c… New CWE-121
Stack-based Buffer Overflow
CVE-2026-36822 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
476 7.5 HIGH
Network
- - Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows at… New CWE-121
Stack-based Buffer Overflow
CVE-2026-36821 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
477 7.5 HIGH
Network
- - Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. This vulnerability … New CWE-121
Stack-based Buffer Overflow
CVE-2026-36820 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
478 7.5 HIGH
Network
- - Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMACAddr parameter of the fromSetDhcpRules function. This vulnerability allows attackers… New CWE-121
Stack-based Buffer Overflow
CVE-2026-36819 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
479 6.1 MEDIUM
Network
- - A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafte… New CWE-79
Cross-site Scripting
CVE-2026-36725 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
480 6.5 MEDIUM
Network
- - An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) … New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-36724 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm