Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133401	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office	Microsoft 365 Apps および Office におけるリモートでコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2021-42296	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133402	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2012 Microsoft Windows Server Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Wi…	Microsoft Windows Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-42291	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133403	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2012 Microsoft Windows Server Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Wi…	Microsoft Windows Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-42287	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133404	7.8	重要 Local	マイクロソフト	Microsoft Windows 10 Microsoft Windows Server	Microsoft Windows 10 および Windows Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-42286	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133405	7.8	重要 Local	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 10 Microsoft Windows 7 Microsoft Windows Server 2012 Microsoft Windows Server Microsoft&n…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-42285	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133406	7.5	重要 Network	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Windows Server Microsoft Windows 11 Microsoft&…	複数の Microsoft Windows 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-400 リソースの枯渇	CVE-2021-42284	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133407	7.8	重要 Local	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 10 Microsoft Windows 7 Microsoft Windows Server 2012 Microsoft Windows Server Microsoft&n…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-42283	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133408	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2012 Microsoft Windows Server Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Wi…	Windows Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-42282	2021-11-15 17:53	2021-11-9	Show	GitHub Exploit DB Packet Storm

133409	8.1	重要 Network	MantisBT Group	MantisBT	MantisBT におけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2009-20001	2021-11-15 17:52	2009-12-21	Show	GitHub Exploit DB Packet Storm

133410	8.8	重要 Network	マイクロソフト	Microsoft Windows 10 Microsoft Windows Server Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2022	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-41378	2021-11-15 17:48	2021-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1451	7.5	HIGH Network	-	-	kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by…	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-10142	2026-06-12 00:22	2026-06-11	Show	GitHub Exploit DB Packet Storm

1452	7.5	HIGH Network	-	-	kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supp…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-10143	2026-06-12 00:22	2026-06-11	Show	GitHub Exploit DB Packet Storm

1453	-		-	-	A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This issue i…	CWE-79 Cross-site Scripting	CVE-2026-0266	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1454	-		-	-	An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the Glo…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-0267	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1455	-		-	-	A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma Access Agent on Window…	CWE-424 Improper Protection of Alternate Path	CVE-2026-0268	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1456	-		-	-	A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-0269	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1457	-		-	-	A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipu…	CWE-22 Path Traversal	CVE-2026-0270	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1458	-		-	-	A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This does not impact Pri…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-0271	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1459	-		-	-	An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resource…	CWE-1390 Weak Authentication	CVE-2026-0274	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1460	-		-	-	A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with…	CWE-862 Missing Authorization	CVE-2026-0272	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm