Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133151	7.5	重要 Network	マイクロソフト	Microsoft System Center	Microsoft System Center における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-41352	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133152	4.3	警告 Network	マイクロソフト	Microsoft Exchange Server	Microsoft Exchange Server におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-41350	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133153	8	重要 Adjacent	マイクロソフト	Microsoft Exchange Server	Microsoft Exchange Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-41348	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133154	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 Microsoft Windows Server 2022 Microsoft Windows 10 Microsoft Windows Server<…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-41347	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133155	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Window…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-40478	2021-10-22 12:21	2021-10-12	Show	GitHub Exploit DB Packet Storm

133156	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft 365 Apps	Microsoft 365 Apps および Office におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40479	2021-10-22 12:21	2021-10-12	Show	GitHub Exploit DB Packet Storm

133157	3.5	低 Network	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Foundation Microsoft SharePoint Enterprise Server	Microsoft SharePoint におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-40484	2021-10-22 12:21	2021-10-12	Show	GitHub Exploit DB Packet Storm

133158	3.5	低 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-40483	2021-10-22 12:21	2021-10-12	Show	GitHub Exploit DB Packet Storm

133159	7.5	重要 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-40482	2021-10-22 12:21	2021-10-12	Show	GitHub Exploit DB Packet Storm

133160	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft 365 Apps	Microsoft 365 Apps および Office におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40481	2021-10-22 12:21	2021-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
521	-		-	-	Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcript channel to a cha… New	CWE-200 Information Exposure	CVE-2026-47177	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

522	-		-	-	PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection vulnerability in the password reset endpoint allows any authenticated user to change the password of… New	CWE-20 CWE-943 Improper Input Validation Improper Neutralization of Special Elements in Data Query Logic	CVE-2026-47181	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

523	-		-	-	Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the AutoMod remove flow looks up and deletes rules by global database ID without ver… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-47189	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

524	7.3	HIGH Network	-	-	KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes … New	CWE-78 OS Command	CVE-2026-48547	2026-06-12 05:57	2026-06-12	Show	GitHub Exploit DB Packet Storm

525	7.6	HIGH Network	-	-	An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC… New	CWE-190 Integer Overflow or Wraparound	CVE-2026-11774	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

526	-		-	-	Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploit this by manipulat… New	CWE-269 Improper Privilege Management	CVE-2026-45176	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

527	-		-	-	Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submittin… New	CWE-284 Improper Access Control	CVE-2026-45177	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

528	-		-	-	Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credenti… New	CWE-284 Improper Access Control	CVE-2026-45178	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

529	-		-	-	Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on V… New	CWE-94 CWE-95 Code Injection Eval Injection	CVE-2026-47167	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

530	-		-	-	Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pyth… New	CWE-94 CWE-95 CWE-829 Code Injection Eval Injection Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-52858	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed