Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133601	7.3	重要 Local	レッドハット日立	Hitachi Ops Center Common Services Keycloak	keycloak における安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2021-20202	2021-10-14 11:05	2021-01-29	Show	GitHub Exploit DB Packet Storm

133602	6.8	警告 Physics	レッドハット日立	Hitachi Ops Center Common Services Red Hat Single Sign-On Keycloak	keycloak における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2021-20262	2021-10-14 11:05	2021-03-1	Show	GitHub Exploit DB Packet Storm

133603	6.5	警告 Network	レッドハット日立	Hitachi Ops Center Common Services Red Hat Single Sign-On Keycloak	keycloak における認証に関する脆弱性	CWE-287 不適切な認証	CVE-2020-27838	2021-10-14 11:05	2020-12-11	Show	GitHub Exploit DB Packet Storm

133604	5.9	警告 Network	日立 Bouncy Castle	Bouncy Castle Crypto package for Java Hitachi Ops Center Common Services Bouncy Castle FJA Bouncy Castle FIPS .NET …	複数の Bouncy Castle 製品における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2020-15522	2021-10-14 11:05	2020-07-4	Show	GitHub Exploit DB Packet Storm

133605	5.4	警告 Network	SolarWinds	Serv-U	SolarWinds Serv-U におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-35482	2021-10-13 18:03	2020-12-21	Show	GitHub Exploit DB Packet Storm

133606	9.8	緊急 Network	Nim-lang	Nim	Nim におけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2020-15690	2021-10-13 18:03	2020-07-2	Show	GitHub Exploit DB Packet Storm

133607	6.1	警告 Network	JetBrains	Hub	JetBrains Hub におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2021-25757	2021-10-13 17:56	2021-02-3	Show	GitHub Exploit DB Packet Storm

133608	7.2	重要 Network	OpenSolution	Quick.CMS Quick.Cart	Quick.CMS および Quick.Cart におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2020-35754	2021-10-13 17:52	2020-12-28	Show	GitHub Exploit DB Packet Storm

133609	5.4	警告 Network	Testes de Codigo	Testes de Codigo	Testes de Codigo におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-25647	2021-10-13 17:52	2021-01-14	Show	GitHub Exploit DB Packet Storm

133610	5.3	警告 Network	GoDaddy Operating Company	node-config-shield	Node.js 用 GoDaddy node-config-shield における動的に操作されるコードリソースの不適切な制御に関する脆弱性	CWE-913 動的に操作されるコードリソースの不適切な制御	CVE-2021-26276	2021-10-13 17:52	2021-01-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
331	-		-	-	Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcript channel to a cha… New	CWE-200 Information Exposure	CVE-2026-47177	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

332	-		-	-	PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection vulnerability in the password reset endpoint allows any authenticated user to change the password of… New	CWE-20 CWE-943 Improper Input Validation Improper Neutralization of Special Elements in Data Query Logic	CVE-2026-47181	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

333	-		-	-	Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the latest release suppresses mentions in several moderation commands, but /unban an… New	CWE-116 Improper Encoding or Escaping of Output	CVE-2026-47188	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

334	-		-	-	Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the AutoMod remove flow looks up and deletes rules by global database ID without ver… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-47189	2026-06-12 05:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

335	7.3	HIGH Network	-	-	KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes … New	CWE-78 OS Command	CVE-2026-48547	2026-06-12 05:57	2026-06-12	Show	GitHub Exploit DB Packet Storm

336	7.6	HIGH Network	-	-	An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC… New	CWE-190 Integer Overflow or Wraparound	CVE-2026-11774	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

337	-		-	-	Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploit this by manipulat… New	CWE-269 Improper Privilege Management	CVE-2026-45176	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

338	-		-	-	Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submittin… New	CWE-284 Improper Access Control	CVE-2026-45177	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

339	-		-	-	Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credenti… New	CWE-284 Improper Access Control	CVE-2026-45178	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

340	-		-	-	Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/a… New	CWE-74 CWE-94 Injection Code Injection	CVE-2026-47162	2026-06-12 05:56	2026-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed