Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133141	5.7	警告 Adjacent	Tufin	SecureTrack	Tufin SecureChange におけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2020-13462	2021-11-2 17:28	2020-05-25	Show	GitHub Exploit DB Packet Storm

133142	4.3	警告 Adjacent	Tufin	SecureTrack	Tufin SecureTrack における脆弱性	CWE-noinfo 情報不足	CVE-2020-13461	2021-11-2 17:28	2020-05-25	Show	GitHub Exploit DB Packet Storm

133143	5.5	警告 Local	アドビシステムズ	Adobe Acrobat DC Adobe Acrobat Adobe Acrobat Reader DC	Adobe Reader および Acrobat における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-39849	2021-11-2 17:28	2021-09-14	Show	GitHub Exploit DB Packet Storm

133144	3.3	低 Local	アドビシステムズ	Adobe Acrobat DC Adobe Acrobat Adobe Acrobat Reader DC	Adobe Reader および Acrobat における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2021-39844	2021-11-2 17:27	2021-09-14	Show	GitHub Exploit DB Packet Storm

133145	7.8	重要 Local	アドビシステムズ	Adobe Acrobat DC Adobe Acrobat Adobe Acrobat Reader DC	Adobe Reader および Acrobat における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-39843	2021-11-2 17:27	2021-09-14	Show	GitHub Exploit DB Packet Storm

133146	6.1	警告 Local	アドビシステムズ	Adobe Acrobat DC Adobe Acrobat Adobe Acrobat Reader DC	Adobe Reader および Acrobat におけるスタックオーバーフローの脆弱性	CWE-787 境界外書き込み	CVE-2021-39845	2021-11-2 17:27	2021-09-14	Show	GitHub Exploit DB Packet Storm

133147	6.1	警告 Network	MB CONNECT LINE	mymbCONNECT24 mbCONNECT24	MB CONNECT LINE 製 mymbCONNECT24 および mbCONNECT24 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-35569	2021-11-2 17:08	2020-07-16	Show	GitHub Exploit DB Packet Storm

133148	6.5	警告 Network	Google Outlook.com	Google Chrome Microsoft Edge Chromium	Chromium CVE-2021-21123: Insufficient data validation in File System API	CWE-20 不適切な入力確認	CVE-2021-21123	2021-11-2 16:56	2021-01-19	Show	GitHub Exploit DB Packet Storm

133149	3.3	低 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2021-39858	2021-11-2 16:56	2021-09-14	Show	GitHub Exploit DB Packet Storm

133150	4.3	警告 Network	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における情報を公開される脆弱性	CWE-200 情報漏えい	CVE-2021-39857	2021-11-2 16:56	2021-09-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
731	7.5	HIGH Network	mongodb	mongodb	A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain n… Update	CWE-674 Uncontrolled Recursion	CVE-2026-9740	2026-06-16 01:55	2026-06-10	Show	GitHub Exploit DB Packet Storm

732	7.6	HIGH Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privile… Update	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-20252	2026-06-16 01:51	2026-06-11	Show	GitHub Exploit DB Packet Storm

733	5.5	MEDIUM Local	mongodb	mongodb	MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parame… Update	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-9735	2026-06-16 01:46	2026-06-10	Show	GitHub Exploit DB Packet Storm

734	9.8	CRITICAL Network	apache	cxf	Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) external entity res… Update	CWE-611 XXE	CVE-2026-49875	2026-06-16 01:32	2026-06-12	Show	GitHub Exploit DB Packet Storm

735	6.5	MEDIUM Network	google	chrome	Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from pr… Update	CWE-125 Out-of-bounds Read	CVE-2026-12026	2026-06-16 01:32	2026-06-12	Show	GitHub Exploit DB Packet Storm

736	8.2	HIGH Network	axios	axios	Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream… Update	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2026-44490	2026-06-16 01:31	2026-06-12	Show	GitHub Exploit DB Packet Storm

737	7.5	HIGH Network	-	-	Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed c… New	CWE-78 OS Command	CVE-2026-9863	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

738	9.8	CRITICAL Network	-	-	Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to c… New	CWE-78 OS Command	CVE-2026-9862	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

739	5.4	MEDIUM Network	-	-	The Form Builder CP WordPress plugin before 1.2.47 does not properly sanitize a form configuration value before storing it and using it as part of a client-side script execution, allowing authenticat… New	-	CVE-2026-9278	2026-06-16 01:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

740	3.4	LOW Network	-	-	The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary `.php` files from… Update	CWE-22 Path Traversal	CVE-2026-9062	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed