Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
133291 4.9 警告
Network
シスコシステムズ Cisco Unified Communications Manager
Cisco Unified Communications Manager IM and Presence Service
複数の Cisco Unified Communications Manager 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2021-1364 2021-10-11 13:47 2021-01-20 Show GitHub Exploit DB Packet Storm
133292 8 重要
Adjacent
Weaveworks Weave Net Weave Net における不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行
CVE-2020-26278 2021-10-8 18:11 2020-12-17 Show GitHub Exploit DB Packet Storm
133293 5.3 警告
Network
シスコシステムズ Cisco Umbrella 仮想アプライアンス Cisco Umbrella における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2021-1350 2021-10-8 18:11 2021-01-20 Show GitHub Exploit DB Packet Storm
133294 7.8 重要
Local
チェック・ポイント・ソフトウェア・テクノロジーズ SmartConsole Check Point SmartConsole における権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2020-6024 2021-10-8 18:11 2020-01-7 Show GitHub Exploit DB Packet Storm
133295 5.9 警告
Network
STMicroelectronics STM32CubeH7
STM32CubeF2
STM32CubeIDE
STM32CubeF3
STM32CubeF4
STM32CubeF1
STM32CubeF7
STM32CubeF0
STM32CubeG4
STM32CubeG0
STM32Cube デバイスにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2020-20949 2021-10-8 18:11 2020-08-13 Show GitHub Exploit DB Packet Storm
133296 9.8 緊急
Network
EGavilan Media User Registration & Login System with Admin Panel EgavilanMedia User Registration & Login System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2020-35263 2021-10-8 18:02 2020-11-17 Show GitHub Exploit DB Packet Storm
133297 8.8 重要
Network
Cake Software Foundation CakePHP CakePHP におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2020-35239 2021-10-8 18:02 2020-12-7 Show GitHub Exploit DB Packet Storm
133298 7.5 重要
Network
projectsend.org ProjectSend ProjectSend における認証に関する脆弱性 CWE-287
CWE-404
CVE-2020-28874 2021-10-8 18:02 2020-11-18 Show GitHub Exploit DB Packet Storm
133299 7.8 重要
Local
Debian
OpenJPEG project
OpenJPEG
Debian GNU/Linux
openjpeg2 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2020-27814 2021-10-8 18:02 2020-11-26 Show GitHub Exploit DB Packet Storm
133300 6.1 警告
Network
WING FTP software Wing FTP Server Wing FTP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2020-27735 2021-10-8 18:02 2020-11-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 5.4 MEDIUM
Network
- - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in … New CWE-80
Basic XSS
CVE-2026-34033 2026-06-10 02:17 2026-06-9 Show GitHub Exploit DB Packet Storm
352 7.8 HIGH
Local
- - Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. New CWE-501
 Trust Boundary Violation
CVE-2026-33828 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
353 5.4 MEDIUM
Network
- - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New CWE-79
Cross-site Scripting
CVE-2026-33113 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
354 8.8 HIGH
Local
- - Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally. New CWE-22
Path Traversal
CVE-2026-32193 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
355 4.8 MEDIUM
Adjacent
- - A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website. New CWE-601
Open Redirect
CVE-2026-28301 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
356 9.8 CRITICAL
Network
- - Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. New CWE-502
 Deserialization of Untrusted Data
CVE-2026-26142 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
357 7.3 HIGH
Local
- - NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execution, data tampering… New CWE-129
 Improper Validation of Array Index
CVE-2026-24181 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
358 7.3 HIGH
Local
- - NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering… New CWE-122
Heap-based Buffer Overflow
CVE-2026-24180 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
359 8.1 HIGH
Network
- - Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. The helper validates connecting XPC clients using the clien… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-24065 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
360 7.8 HIGH
Local
- - Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. New CWE-22
Path Traversal
CVE-2026-22926 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm