Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133491	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server Microsoft Windows 11 Microsoft Windows 10	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-41334	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133492	6.5	警告 Network	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Window…	複数の Microsoft Windows 製品における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-41332	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133493	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Windows Server 2008 Microsoft Window…	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-41331	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133494	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server Microsoft Windows 10	Microsoft Windows 10 および Windows Server におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-41330	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133495	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Window…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-40489	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133496	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows Server 2012 Microsoft Window…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-40488	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133497	8.8	重要 Network	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Foundation Microsoft SharePoint Enterprise Server	Microsoft SharePoint におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40487	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133498	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft SharePoint Server Microsoft Word Microsoft SharePoint Enterprise Server	複数の Microsoft 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40486	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133499	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft Excel Microsoft SharePoint Enterprise Server Microsoft 365 Apps	複数の Microsoft 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-40485	2021-10-22 12:18	2021-10-12	Show	GitHub Exploit DB Packet Storm

133500	9.8	緊急 Network	FiberHome Technologies Group	HG6245D ファームウェア	FiberHome HG6245D デバイスにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2021-27157	2021-10-21 17:35	2021-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
721	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the applica… Update	CWE-20 Improper Input Validation	CVE-2026-47903	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

722	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s… Update	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47905	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

723	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s… Update	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47904	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

724	6.5	MEDIUM Network	mongodb	mongodb	The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechani… Update	CWE-617 Reachable Assertion	CVE-2026-9748	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

725	6.5	MEDIUM Network	mongodb	mongodb	An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in… Update	CWE-617 Reachable Assertion	CVE-2026-9750	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

726	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-… Update	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71329	2026-06-16 02:09	2026-06-10	Show	GitHub Exploit DB Packet Storm

727	8.8	HIGH Network	splunk	splunk splunk_cloud_platform splunk_secure_gateway	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers… Update	CWE-502 Deserialization of Untrusted Data	CVE-2026-20251	2026-06-16 02:08	2026-06-11	Show	GitHub Exploit DB Packet Storm

728	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack… Update	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71330	2026-06-16 02:00	2026-06-10	Show	GitHub Exploit DB Packet Storm

729	6.5	MEDIUM Network	mongodb	mongodb	Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server. Update	CWE-617 Reachable Assertion	CVE-2026-9747	2026-06-16 01:58	2026-06-10	Show	GitHub Exploit DB Packet Storm

730	6.5	MEDIUM Network	mongodb	mongodb	In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may derefe… Update	CWE-476 NULL Pointer Dereference	CVE-2026-9743	2026-06-16 01:56	2026-06-10	Show	GitHub Exploit DB Packet Storm