Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133701	5.5	警告 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11	Microsoft Windows 11 および Windows Server における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-41336	2021-10-22 13:44	2021-10-12	Show	GitHub Exploit DB Packet Storm

133702	6.7	警告 Local	マイクロソフト	Intune management extension	Intune Management Extension におけるセキュリティ機能を回避される脆弱性	CWE-noinfo 情報不足	CVE-2021-41363	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133703	3.5	低 Network	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microsoft Windows Server 2016	Microsoft Windows Server におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-41361	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133704	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows 10 Microsoft Windows 11	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-41357	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133705	5.7	警告 Adjacent	マイクロソフト	PowerShell .NET Microsoft Visual Studio	複数の Microsoft 製品における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-41355	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133706	5.4	警告 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-41354	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133707	3.5	低 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-41353	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133708	7.5	重要 Network	マイクロソフト	Microsoft System Center	Microsoft System Center における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-41352	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133709	4.3	警告 Network	マイクロソフト	Microsoft Exchange Server	Microsoft Exchange Server におけるなりすまされる脆弱性	CWE-noinfo 情報不足	CVE-2021-41350	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

133710	8	重要 Adjacent	マイクロソフト	Microsoft Exchange Server	Microsoft Exchange Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-41348	2021-10-22 13:43	2021-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
591	6.5	MEDIUM Network	-	-	Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding functions by triggering account deletio…	CWE-645 Overly Restrictive Account Lockout Mechanism	CVE-2026-53982	2026-06-16 05:50	2026-06-13	Show	GitHub Exploit DB Packet Storm

592	10.0	CRITICAL Network	-	-	SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity toke…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-48558	2026-06-16 05:50	2026-06-13	Show	GitHub Exploit DB Packet Storm

593	4.3	MEDIUM Network	-	-	Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated…	CWE-459 Incomplete Cleanup	CVE-2026-53867	2026-06-16 05:50	2026-06-13	Show	GitHub Exploit DB Packet Storm

594	7.5	HIGH Network	-	-	Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in…	CWE-306 Missing Authentication for Critical Function	CVE-2026-53868	2026-06-16 05:50	2026-06-13	Show	GitHub Exploit DB Packet Storm

595	-		-	-	The Iptanus File Upload WordPress plugin before 5.1.7 does not implement proper file handling when the duplicatepolicy setting is configured to "maintain both." Due to a Time-of-Check to Time-of-Use …	-	CVE-2025-15546	2026-06-16 05:50	2026-06-14	Show	GitHub Exploit DB Packet Storm

596	7.8	HIGH Local	-	-	Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This…	CWE-125 Out-of-bounds Read	CVE-2025-7002	2026-06-16 05:49	2026-06-13	Show	GitHub Exploit DB Packet Storm

597	7.8	HIGH Local	-	-	Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This…	CWE-125 Out-of-bounds Read	CVE-2025-7003	2026-06-16 05:49	2026-06-13	Show	GitHub Exploit DB Packet Storm

598	7.8	HIGH Local	-	-	Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine proces…	CWE-125 Out-of-bounds Read	CVE-2025-7017	2026-06-16 05:49	2026-06-13	Show	GitHub Exploit DB Packet Storm

599	5.5	MEDIUM Local	-	-	Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This issue affects Avira Antiv…	CWE-476 NULL Pointer Dereference	CVE-2025-7018	2026-06-16 05:49	2026-06-13	Show	GitHub Exploit DB Packet Storm

600	7.8	HIGH Local	-	-	Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue…	CWE-787 Out-of-bounds Write	CVE-2025-7004	2026-06-16 05:49	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed