Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133801 6.5 警告
Network 		Nextcloud Nextcloud Server Nextcloud Server におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2020-8293 2021-10-8 15:57 2020-11-18 Show GitHub Exploit DB Packet Storm
133802 7.5 重要
Network 		Xerox WorkCentre 5865i ファームウェア
WorkCentre 3655i ファームウェア
WorkCentre 5875 ファームウェア
WorkCentre 5875i ファームウェア
WorkCentre 5865 ファームウェア
WorkCentre&… 		複数の Xerox WorkCentre 製品における暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2020-36201 2021-10-8 15:57 2020-06-25 Show GitHub Exploit DB Packet Storm
133803 6.5 警告
Network 		カスペルスキー TinyCheck TinyCheck におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2020-36200 2021-10-8 15:57 2020-12-18 Show GitHub Exploit DB Packet Storm
133804 9.8 緊急
Network 		カスペルスキー TinyCheck TinyCheck における入力確認に関する脆弱性 CWE-20
CWE-78
CVE-2020-36199 2021-10-8 15:57 2020-12-18 Show GitHub Exploit DB Packet Storm
133805 6.1 警告
Network 		Persis GmbH Persis Human Resource Management Portal Persis Human Resource Management Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-35753 2021-10-8 15:57 2020-12-28 Show GitHub Exploit DB Packet Storm
133806 4.3 警告
Network 		Nike, Inc. Nike スマートフォンアプリ「Nike」における Custom URL Scheme の処理にアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2021-20834 2021-10-8 12:08 2021-10-8 Show GitHub Exploit DB Packet Storm
133807 7.5 重要
Network 		fil-ocl project fil-ocl Rust 用 fil-ocl crate における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2021-25908 2021-10-7 18:11 2021-01-4 Show GitHub Exploit DB Packet Storm
133808 9.8 緊急
Network 		containers project containers RUST 用 containers crate における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2021-25907 2021-10-7 18:11 2021-01-12 Show GitHub Exploit DB Packet Storm
133809 7.5 重要
Network 		basic_dsp_matrix project basic_dsp_matrix RUST 用 basic_dsp_matrix crate における脆弱性 CWE-noinfo
情報不足 		CVE-2021-25906 2021-10-7 18:11 2021-01-10 Show GitHub Exploit DB Packet Storm
133810 9.1 緊急
Network 		bra project bra RUST 用 bra crate における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2021-25905 2021-10-7 18:11 2021-01-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 6.5 MEDIUM
Network 		- - Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authe… New CWE-22
Path Traversal 		CVE-2026-11442 2026-06-13 09:16 2026-06-13 Show GitHub Exploit DB Packet Storm
52 7.8 HIGH
Local 		- - Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine proc… New CWE-787
 Out-of-bounds Write 		CVE-2026-6676 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
53 7.4 HIGH
Network 		- - Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the pare… New CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2026-12068 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
54 7.8 HIGH
Local 		- - Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This… New CWE-125
Out-of-bounds Read 		CVE-2025-9033 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
55 7.8 HIGH
Local 		- - Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process… New CWE-125
Out-of-bounds Read 		CVE-2025-9032 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
56 7.8 HIGH
Local 		- - Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2025-14098 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
57 - - - An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with object editing permissions to assign a MISP object, or attributes contained within an object, to a sharing … New CWE-863
 Incorrect Authorization 		CVE-2026-54398 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
58 - - - Rejected reason: CVE ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-53826. Reason: This candidate is a duplicate of CVE-2025-53826. Notes: All CVE users should reference CVE-2025… New - CVE-2026-54095 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
59 7.5 HIGH
Network 		- - Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-53868 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
60 4.3 MEDIUM
Network 		- - Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated… New CWE-459
 Incomplete Cleanup 		CVE-2026-53867 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm