Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133211	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Wi…	Microsoft Windows 10 および Windows Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38634	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133212	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows RT 8.1 Microsoft Windows Server 2008 Microsoft Windows…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38633	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133213	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows RT 8.1 Microsoft Windows Server 2008 Microsoft Windows…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38630	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133214	3.5	低 Network	マイクロソフト	Microsoft Office Microsoft 365 Apps	Microsoft 365 Apps および Office におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-38650	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133215	4.6	警告 Physics	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Wi…	Microsoft Windows 10 および Windows Server におけるセキュリティ機能を回避される脆弱性	CWE-noinfo 情報不足	CVE-2021-38632	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133216	6.5	警告 Network	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows 10 Microsoft Windows Server 2019	Microsoft Windows 10 および Windows Server におけるセキュリティ機能を回避される脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2021-38624	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133217	6.1	警告 Network	Joomla!	Joomla!	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-23124	2021-09-29 16:07	2021-01-12	Show	GitHub Exploit DB Packet Storm

133218	7.2	重要 Network	シスコシステムズ	RV215W Wireless-N VPN Router ファームウェア Cisco RV110W Wireless-N VPN Firewall ファームウェア Application Extension Platform RV130 VPN Ro…	複数の Cisco Small Business RV ルータにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2021-1150	2021-09-29 15:59	2021-01-13	Show	GitHub Exploit DB Packet Storm

133219	3.5	低 Network	マイクロソフト	Microsoft SharePoint Foundation Microsoft SharePoint Enterprise Server	Microsoft SharePoint におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-38652	2021-09-29 15:59	2021-09-14	Show	GitHub Exploit DB Packet Storm

133220	3.5	低 Network	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Foundation Microsoft SharePoint Enterprise Server	Microsoft SharePoint におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-38651	2021-09-29 15:59	2021-09-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221	-		-	-	In the Linux kernel, the following vulnerability has been resolved: AppArmor: Allow apparmor to handle unaligned dfa tables The dfa tables can originate from kernel or userspace and 8-byte alignmen… Update	-	CVE-2026-46254	2026-06-6 05:51	2026-06-4	Show	GitHub Exploit DB Packet Storm

222	-		-	-	In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: don't explicitly disable clocks in .remove() The clocks in fsl_edma_engine::muxclk are allocated and enabled… Update	-	CVE-2026-46255	2026-06-6 05:51	2026-06-4	Show	GitHub Exploit DB Packet Storm

223	-		-	-	In the Linux kernel, the following vulnerability has been resolved: NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages LOCALIO is an NFS loopback mount optimization that avoi… Update	-	CVE-2026-46256	2026-06-6 05:51	2026-06-4	Show	GitHub Exploit DB Packet Storm

224	-		-	-	In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registere… Update	-	CVE-2026-46257	2026-06-6 05:51	2026-06-4	Show	GitHub Exploit DB Packet Storm

225	-		-	-	In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378773 has already changed the initial page refcount of p2pdma… Update	-	CVE-2026-46268	2026-06-6 05:51	2026-06-4	Show	GitHub Exploit DB Packet Storm

226	-		-	-	In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k230 pinctrl driver, the kernel trig… Update	-	CVE-2026-46269	2026-06-6 05:51	2026-06-4	Show	GitHub Exploit DB Packet Storm

227	-		-	-	In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition between sysfs and perf mode When trying to run perf and sysfs mode simultaneously, the WAR… Update	-	CVE-2026-46272	2026-06-6 05:51	2026-06-4	Show	GitHub Exploit DB Packet Storm

228	7.4	HIGH Network	-	-	The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Versions on the 2.x branch prior to 2.15.0 and the 3.x branch pri… New	CWE-200 Information Exposure	CVE-2026-45300	2026-06-6 05:51	2026-06-6	Show	GitHub Exploit DB Packet Storm

229	9.6	CRITICAL Network	-	-	Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. … New	CWE-506 Embedded Malicious Code	CVE-2026-45758	2026-06-6 05:51	2026-06-6	Show	GitHub Exploit DB Packet Storm

230	-		-	-	A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauthenticated network a… New	CWE-22 CWE-798 Path Traversal Use of Hard-coded Credentials	CVE-2026-11414	2026-06-6 05:49	2026-06-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed