Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133231 6.7 警告
Local 		Linux
Fedora Project		 Linux Kernel
Fedora 		Linux Kernel における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2020-36158 2021-09-14 18:04 2020-12-8 Show GitHub Exploit DB Packet Storm
133232 10 緊急
Network 		デル Wyse ThinOS Dell Wyse ThinOS における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2020-29492 2021-09-14 18:04 2020-12-21 Show GitHub Exploit DB Packet Storm
133233 8.6 重要
Network 		デル Wyse ThinOS Dell Wyse ThinOS における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2020-29491 2021-09-14 18:04 2020-12-21 Show GitHub Exploit DB Packet Storm
133234 8.8 重要
Network 		Ultimate Member Group Ltd Ultimate Member WordPress 用の Ultimate Member プラグインにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2020-36156 2021-09-14 18:04 2020-10-29 Show GitHub Exploit DB Packet Storm
133235 7.8 重要
Local 		Treasure Data Fluent Bit Fluent Bit における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2020-35963 2021-09-14 18:04 2020-11-8 Show GitHub Exploit DB Packet Storm
133236 6.5 警告
Network 		PHP-Fusion PHP-Fusion PHPFusion における脆弱性 CWE-noinfo
情報不足 		CVE-2020-35952 2021-09-14 18:04 2020-12-22 Show GitHub Exploit DB Packet Storm
133237 5.3 警告
Network 		アドビシステムズ Adobe Bridge Magento における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-21012 2021-09-14 17:26 2021-02-9 Show GitHub Exploit DB Packet Storm
133238 7 重要
Local 		アドビシステムズ Adobe Captivate Adobe Captivate における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2021-21011 2021-09-14 17:26 2021-01-12 Show GitHub Exploit DB Packet Storm
133239 7 重要
Local 		アドビシステムズ Adobe InCopy InCopy における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2021-21010 2021-09-14 17:26 2021-01-12 Show GitHub Exploit DB Packet Storm
133240 7 重要
Local 		アドビシステムズ Adobe Animate Adobe Animate における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2021-21008 2021-09-14 17:26 2021-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 2.7 LOW
Network 		element synapse Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full h… Update CWE-20
 Improper Input Validation  		CVE-2026-45076 2026-06-5 03:04 2026-05-29 Show GitHub Exploit DB Packet Storm
52 9.9 CRITICAL
Network 		flowintel flowintel FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can submit an external… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-9813 2026-06-5 03:03 2026-05-28 Show GitHub Exploit DB Packet Storm
53 5.4 MEDIUM
Network 		appsmith appsmith Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Developer to inject persistent XSS by a … New CWE-79
Cross-site Scripting 		CVE-2026-7299 2026-06-5 02:41 2026-06-3 Show GitHub Exploit DB Packet Storm
54 6.5 MEDIUM
Adjacent 		tp-link tapo_c200_firmware TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted … New CWE-121
Stack-based Buffer Overflow 		CVE-2026-1871 2026-06-5 02:41 2026-06-3 Show GitHub Exploit DB Packet Storm
55 7.8 HIGH
Local 		nvidia nvtabular NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampe… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24221 2026-06-5 02:41 2026-06-3 Show GitHub Exploit DB Packet Storm
56 7.8 HIGH
Local 		nvidia nvtabular NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampe… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24237 2026-06-5 02:40 2026-06-3 Show GitHub Exploit DB Packet Storm
57 6.1 MEDIUM
Physics 		dell thinos Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerabilit… New CWE-284
Improper Access Control 		CVE-2026-40713 2026-06-5 02:37 2026-06-3 Show GitHub Exploit DB Packet Storm
58 7.8 HIGH
Local 		dell thinos Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, le… New CWE-284
Improper Access Control 		CVE-2026-40715 2026-06-5 02:29 2026-06-3 Show GitHub Exploit DB Packet Storm
59 7.5 HIGH
Network 		mozilla firefox Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3. New CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-10701 2026-06-5 02:25 2026-06-3 Show GitHub Exploit DB Packet Storm
60 - - - Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661), or non-digits, wh… New CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-49942 2026-06-5 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm