Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133321	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Windows Server 2008 Microsoft Window…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-41335	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133322	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server Microsoft Windows 11 Microsoft Windows 10	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-41334	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133323	6.5	警告 Network	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Window…	複数の Microsoft Windows 製品における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-41332	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133324	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Windows Server 2008 Microsoft Window…	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-41331	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133325	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server Microsoft Windows 10	Microsoft Windows 10 および Windows Server におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-41330	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133326	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Window…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-40489	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133327	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Window…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-40488	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133328	8.8	重要 Network	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Foundation Microsoft SharePoint Enterprise Server	Microsoft SharePoint におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40487	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133329	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft SharePoint Server Microsoft Word Microsoft SharePoint Enterprise Server	複数の Microsoft 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40486	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133330	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft Excel Microsoft SharePoint Enterprise Server Microsoft 365 Apps	複数の Microsoft 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40485	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
711	6.1	MEDIUM Network	adobe	experience_manager	Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scr…	CWE-79 Cross-site Scripting	CVE-2026-34691	2026-06-12 02:29	2026-06-10	Show	GitHub Exploit DB Packet Storm

712	6.5	MEDIUM Network	gitlab	gitlab	GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authe…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-9204	2026-06-12 02:28	2026-06-11	Show	GitHub Exploit DB Packet Storm

713	8.7	HIGH Network	gitlab	gitlab	GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authent…	CWE-79 Cross-site Scripting	CVE-2026-8589	2026-06-12 02:28	2026-06-11	Show	GitHub Exploit DB Packet Storm

714	4.7	MEDIUM Network	adobe	experience_manager	Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject …	CWE-79 Cross-site Scripting	CVE-2026-34693	2026-06-12 02:22	2026-06-10	Show	GitHub Exploit DB Packet Storm

715	4.8	MEDIUM Network	adobe	experience_manager	Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to injec…	CWE-79 Cross-site Scripting	CVE-2026-34694	2026-06-12 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

716	9.1	CRITICAL Network	-	-	The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted…	-	CVE-2026-9648	2026-06-12 02:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

717	8.1	HIGH Network	-	-	Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by supplying unsanitized …	CWE-22 Path Traversal	CVE-2026-53777	2026-06-12 02:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

718	8.2	HIGH Network	-	-	tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects only string values that contain the substring ... It is bypassed when prefix, p…	CWE-20 CWE-22 Improper Input Validation Path Traversal	CVE-2026-49982	2026-06-12 02:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

719	7.5	HIGH Network	-	-	Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.0, several russh client and server message handlers decoded attacker-controlled SSH strings, name-lists, and by…	CWE-20 Improper Input Validation	CVE-2026-48110	2026-06-12 02:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

720	7.5	HIGH Network	-	-	Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabled, russh accepted compressed packets whose on-wire size passed the normal tran…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-46702	2026-06-12 02:16	2026-06-11	Show	GitHub Exploit DB Packet Storm