Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
133241 8.6 重要
Network
HashiCorp
Google
protobuf
Consul
GoGo Protobuf における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2021-3121 2021-09-16 17:26 2021-01-10 Show GitHub Exploit DB Packet Storm
133242 9.8 緊急
Network
Evolucare ECSIMAGING EVOLUCARE ECSIMAGING における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2021-3118 2021-09-16 17:26 2021-01-6 Show GitHub Exploit DB Packet Storm
133243 5.4 警告
Network
Innokas Medical Ltd. Vital Signs Monitor VC150 ファームウェア Innokas Yhtyma Oy Vital Signs Monitor VC150 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2020-27262 2021-09-16 17:19 2020-10-19 Show GitHub Exploit DB Packet Storm
133244 5.3 警告
Physics
Innokas Medical Ltd. Vital Signs Monitor VC150 ファームウェア Innokas Yhtyma Oy Vital Signs Monitor VC150 におけるインジェクションに関する脆弱性 CWE-74
インジェクション
CVE-2020-27260 2021-09-16 17:19 2020-10-19 Show GitHub Exploit DB Packet Storm
133245 9.8 緊急
Network
Quest Software Inc. Quest Policy Authority Quest Policy Authority におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2020-35205 2021-09-16 17:19 2020-12-16 Show GitHub Exploit DB Packet Storm
133246 5.3 警告
Local
SonicWALL NetExtender SonicWall NetExtender Windows クライアントにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2020-5147 2021-09-16 17:19 2021-01-9 Show GitHub Exploit DB Packet Storm
133247 7.2 重要
Network
SonicWALL SMA100 ファームウェア SonicWall SMA100 における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2020-5146 2021-09-16 17:19 2021-01-8 Show GitHub Exploit DB Packet Storm
133248 4.4 警告
Local
Fedora Project
レッドハット
Red Hat Ceph Storage
Red Hat Ceph
Fedora
ceph における重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2020-25678 2021-09-16 17:19 2020-10-27 Show GitHub Exploit DB Packet Storm
133249 7.2 重要
Network
Barco TransForm N Barco TransForm N におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2020-17504 2021-09-16 17:19 2020-11-5 Show GitHub Exploit DB Packet Storm
133250 7.2 重要
Network
Barco TransForm N NDN-210 におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2020-17503 2021-09-16 17:19 2020-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 - - - SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using … New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-41259 2026-06-5 01:40 2026-06-3 Show GitHub Exploit DB Packet Storm
82 7.2 HIGH
Network
- - There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR.  An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP servic… New CWE-78
OS Command 
CVE-2026-3820 2026-06-5 01:40 2026-06-4 Show GitHub Exploit DB Packet Storm
83 - - - tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. T… New CWE-22
Path Traversal
CVE-2026-7774 2026-06-5 01:40 2026-06-5 Show GitHub Exploit DB Packet Storm
84 6.3 MEDIUM
Network
- - A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37. This affects the function readFileFromUrl of the file src/tools/filesystem.ts of the component read_file. Such manipulation … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10690 2026-06-5 01:37 2026-06-3 Show GitHub Exploit DB Packet Storm
85 - - - An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross… New CWE-74
Injection
CVE-2026-10729 2026-06-5 01:37 2026-06-3 Show GitHub Exploit DB Packet Storm
86 7.3 HIGH
Network
- - A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the compone… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10771 2026-06-5 01:37 2026-06-4 Show GitHub Exploit DB Packet Storm
87 3.3 LOW
Local
- - A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipul… New CWE-189
CWE-190
Numeric Errors
 Integer Overflow or Wraparound
CVE-2026-10722 2026-06-5 01:37 2026-06-3 Show GitHub Exploit DB Packet Storm
88 2.5 LOW
Local
- - A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of we… New CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash
CVE-2026-10783 2026-06-5 01:37 2026-06-4 Show GitHub Exploit DB Packet Storm
89 6.3 MEDIUM
Network
- - A security vulnerability has been detected in EIPStackGroup OpENer up to 2.3.0. Affected is the function CreateMessageRouterRequestStructure of the file cipmessagerouter.c of the component SendRRData… New CWE-119
CWE-416
Incorrect Access of Indexable Resource ('Range Error') 
 Use After Free
CVE-2026-10703 2026-06-5 01:35 2026-06-3 Show GitHub Exploit DB Packet Storm
90 4.3 MEDIUM
Network
- - A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This impacts an unknown function of the file src/search-manager.ts of the component start_search. Performing a ma… New CWE-400
CWE-1333
 Uncontrolled Resource Consumption
 Inefficient Regular Expression Complexity
CVE-2026-10691 2026-06-5 01:35 2026-06-3 Show GitHub Exploit DB Packet Storm