Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133451 7.2 重要
Network 		シスコシステムズ Application Extension Platform
Cisco RV110W Wireless-N VPN Firewall ファームウェア
RV130 VPN Router ファームウェア
RV215W Wireless-N VPN Ro… 		複数の Cisco Small Business RV ルータにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2021-1149 2021-09-29 16:23 2021-01-13 Show GitHub Exploit DB Packet Storm
133452 5.3 警告
Network 		Joomla! Joomla! Joomla! における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2021-23123 2021-09-29 16:17 2021-01-12 Show GitHub Exploit DB Packet Storm
133453 6.5 警告
Network 		マイクロソフト Microsoft Windows Server
Microsoft Windows Server 2022
Microsoft Windows RT 8.1
Microsoft Windows Server 2008
Microsoft Windows… 		複数の Microsoft Windows 製品における情報を公開される脆弱性 CWE-noinfo
情報不足 		CVE-2021-38629 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
133454 7.8 重要
Local 		マイクロソフト Microsoft Windows Server
Microsoft Windows Server 2022
Microsoft Windows RT 8.1
Microsoft Windows Server 2008
Microsoft Windows… 		複数の Microsoft Windows 製品 における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-38628 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
133455 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2008 Windows Server における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-38626 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
133456 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2008 Windows Server における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-38625 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
133457 7.8 重要
Local 		マイクロソフト Microsoft Windows Server
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2019 		Microsoft Windows 10 および Windows Server における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-36975 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
133458 7.8 重要
Local 		マイクロソフト Microsoft Windows Server
Microsoft Windows Server 2022
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows… 		複数の Microsoft Windows 製品 における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-36974 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
133459 7.8 重要
Local 		マイクロソフト Microsoft Windows Server
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Wi… 		Microsoft Windows 10 および Windows Server における権限を昇格される脆弱性 CWE-269
不適切な権限管理 		CVE-2021-36973 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
133460 5.5 警告
Local 		マイクロソフト Microsoft Windows Server
Microsoft Windows Server 2022
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows… 		複数の Microsoft Windows 製品における情報を公開される脆弱性 CWE-noinfo
情報不足 		CVE-2021-36972 2021-09-29 16:12 2021-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 - - - Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. New CWE-125
Out-of-bounds Read 		CVE-2026-43951 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
182 - - - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint of FlowiseAI. T… New CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-42861 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
183 5.4 MEDIUM
Network 		- - IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customers that are not assi… Update CWE-863
 Incorrect Authorization 		CVE-2026-42547 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
184 - - - Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are re… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-42536 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
185 - - - A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. User… New CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2026-42535 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
186 4.7 MEDIUM
Network 		- - Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redir… Update CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-42329 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
187 8.8 HIGH
Network 		- - Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. The provisioning cod… Update CWE-59
Link Following 		CVE-2026-41236 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
188 - - - Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability allows attackers to ca… New - CVE-2026-36786 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
189 - - - Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-34356 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
190 - - - A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue. New CWE-122
Heap-based Buffer Overflow 		CVE-2026-34355 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm