Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133631	6.1	警告 Network	QualiSystems LTD	CloudShell	Quali CloudShell におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-15864	2021-09-29 17:26	2020-10-4	Show	GitHub Exploit DB Packet Storm

133632	7.8	重要 Local	Docker	Docker	macOS 用 Docker Desktop Community における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2021-3162	2021-09-29 17:26	2021-01-15	Show	GitHub Exploit DB Packet Storm

133633	7	重要 Local	Malwarebytes	Malwarebytes	macOS 用 Malwarebytes における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2020-25533	2021-09-29 17:26	2020-04-23	Show	GitHub Exploit DB Packet Storm

133634	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS Evolved	Juniper Networks Junos OS Evolved における初期化されていないポインタのアクセスに関する脆弱性	CWE-824 初期化されていないポインタのアクセス	CVE-2021-0209	2021-09-29 17:26	2021-01-13	Show	GitHub Exploit DB Packet Storm

133635	8.8	重要 Network	Robert Bosch GmbH	PRAESENSA ファームウェア PRAESIDEO ファームウェア	Bosch PRAESIDEO および Bosch PRAESENSA におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2020-6776	2021-09-29 17:22	2020-09-30	Show	GitHub Exploit DB Packet Storm

133636	4.8	警告 Network	Robert Bosch GmbH	PRAESENSA ファームウェア PRAESIDEO ファームウェア	Bosch PRAESIDEO および Bosch PRAESENSA におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-6777	2021-09-29 17:22	2020-09-30	Show	GitHub Exploit DB Packet Storm

133637	10	緊急 Network	デル	Dell EMC Integrated Data Protection Appliance Dell EMC Avamar Server	DELL EMC Avamar Server における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2020-29495	2021-09-29 17:18	2020-12-3	Show	GitHub Exploit DB Packet Storm

133638	8.7	重要 Network	デル	Dell EMC Integrated Data Protection Appliance Dell EMC Avamar Server	DELL EMC Avamar Server におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2020-29494	2021-09-29 17:18	2020-12-3	Show	GitHub Exploit DB Packet Storm

133639	9.8	緊急 Network	デル	Dell EMC Integrated Data Protection Appliance Dell EMC Avamar Server	DELL EMC Avamar Server における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2020-29493	2021-09-29 17:18	2020-12-3	Show	GitHub Exploit DB Packet Storm

133640	7.2	重要 Network	シスコシステムズ	Application Extension Platform Cisco RV110W Wireless-N VPN Firewall ファームウェア RV130 VPN Router ファームウェア RV215W Wireless-N VPN Ro…	複数の Cisco Small Business RV ルータにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-1189	2021-09-29 17:00	2021-01-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1	9.8	CRITICAL Network	-	-	In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.3 and 10.2.2510.14, an unauthenticated user could create or truncate arbitrary files through … New	CWE-306 Missing Authentication for Critical Function	CVE-2026-20253	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

2	5.7	MEDIUM Network	-	-	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… New	CWE-20 Improper Input Validation	CVE-2026-20255	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

3	8.8	HIGH Network	-	-	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers… New	CWE-502 Deserialization of Untrusted Data	CVE-2026-20251	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

4	7.6	HIGH Network	-	-	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privile… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-20252	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

5	5.7	MEDIUM Network	-	-	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… New	CWE-20 Improper Input Validation	CVE-2026-20254	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

6	5.7	MEDIUM Network	-	-	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… New	CWE-20 Improper Input Validation	CVE-2026-20256	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

7	5.7	MEDIUM Network	-	-	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… New	CWE-20 Improper Input Validation	CVE-2026-20257	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

8	7.1	HIGH Network	-	-	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that… New	CWE-79 Cross-site Scripting	CVE-2026-20258	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

9	5.5	MEDIUM Network	-	-	In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.131, a user who holds… New	CWE-284 Improper Access Control	CVE-2026-20259	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

10	4.3	MEDIUM Network	-	-	In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute (ANSI) escape codes into SOAR ap… New	CWE-117 Improper Output Neutralization for Logs	CVE-2026-20260	2026-06-11 03:36	2026-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed