Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133851 5.3 警告
Network 		トレンドマイクロ Apex One
Trend Micro OfficeScan 		Trend Micro Apex One および OfficeScan XG SP1 における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2021-25230 2021-10-15 14:09 2021-01-28 Show GitHub Exploit DB Packet Storm
133852 7.5 重要
Network 		Nibbleblog Nibbleblog nibbleblog における脆弱性 CWE-noinfo
情報不足 		CVE-2020-23356 2021-10-15 14:03 2020-05-21 Show GitHub Exploit DB Packet Storm
133853 7.2 重要
Network 		VMware Spring Cloud Data Flow Spring Cloud Data Flow における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2020-5427 2021-10-15 14:00 2020-12-1 Show GitHub Exploit DB Packet Storm
133854 7 重要
Local 		Morphisec Ltd.
シスコシステムズ
Systemsoftware Mathias Rauen		 Morphisec Unified Threat Prevention Platform
madCodeHook
Cisco Advanced Malware Protection for Endpoints 		madCodeHook における Time-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2020-14418 2021-10-14 18:09 2020-07-16 Show GitHub Exploit DB Packet Storm
133855 9.8 緊急
Network 		TerraMaster TOS TerraMaster TOS における動的に操作されるコードリソースの不適切な制御に関する脆弱性 CWE-913
動的に操作されるコードリソースの不適切な制御 		CVE-2020-15568 2021-10-14 18:09 2020-08-6 Show GitHub Exploit DB Packet Storm
133856 5.4 警告
Network 		日立 Vantara Pentaho Hitachi Vantara Pentaho におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-24670 2021-10-14 18:09 2020-08-26 Show GitHub Exploit DB Packet Storm
133857 5.4 警告
Network 		日立 Vantara Pentaho Hitachi Vantara Pentaho におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-24669 2021-10-14 18:09 2020-08-26 Show GitHub Exploit DB Packet Storm
133858 5.4 警告
Network 		日立 Vantara Pentaho Hitachi Vantara Pentaho におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-24666 2021-10-14 18:09 2020-08-26 Show GitHub Exploit DB Packet Storm
133859 6.5 警告
Network 		日立 Vantara Pentaho Hitachi Vantara Pentaho における DTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 CWE-776
DTD の再帰的なエンティティ参照の不適切な制限 		CVE-2020-24665 2021-10-14 18:09 2020-08-26 Show GitHub Exploit DB Packet Storm
133860 5.4 警告
Network 		日立 Vantara Pentaho Hitachi Vantara Pentaho におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-24664 2021-10-14 18:09 2020-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221 7.5 HIGH
Network 		netty netty Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessag… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-46340 2026-06-15 11:12 2026-06-13 Show GitHub Exploit DB Packet Storm
222 5.3 MEDIUM
Network 		netty netty Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, DefaultHttp2Connection.DefaultEndpoint initialises maxActiv… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-47244 2026-06-15 11:11 2026-06-13 Show GitHub Exploit DB Packet Storm
223 8.2 HIGH
Network 		nuxt nuxt Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4.4.7, there is a route-rule middleware bypass via case-sensitivity mismatch bet… Update CWE-178
CWE-863
 Improper Handling of Case Sensitivity
 Incorrect Authorization 		CVE-2026-53721 2026-06-15 11:11 2026-06-13 Show GitHub Exploit DB Packet Storm
224 5.4 MEDIUM
Network 		nuxt nuxt Nuxt is an open-source web development framework for Vue.js. Prior to versions 3.21.7 and 4.4.7, <NuxtLink> did not validate the URL scheme of values bound to its to or href props before rendering th… Update CWE-79
CWE-83
Cross-site Scripting
 Improper Neutralization of Script in Attributes in a Web Page 		CVE-2026-53722 2026-06-15 11:10 2026-06-13 Show GitHub Exploit DB Packet Storm
225 5.3 MEDIUM
Network 		ironmansoftware powershell_universal Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints. Update CWE-306
Missing Authentication for Critical Function 		CVE-2026-8694 2026-06-15 11:09 2026-06-13 Show GitHub Exploit DB Packet Storm
226 10.0 CRITICAL
Network 		netty netty Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the ba… Update CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-47691 2026-06-15 10:57 2026-06-13 Show GitHub Exploit DB Packet Storm
227 7.5 HIGH
Network 		netty netty Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler permanently leaks pooled d… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-48006 2026-06-15 10:56 2026-06-13 Show GitHub Exploit DB Packet Storm
228 7.5 HIGH
Network 		netty netty Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingDecompressorFrameListen… Update CWE-400
CWE-401
 Uncontrolled Resource Consumption
 Missing Release of Memory after Effective Lifetime 		CVE-2026-48043 2026-06-15 10:56 2026-06-13 Show GitHub Exploit DB Packet Storm
229 7.5 HIGH
Network 		netty netty Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native o… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-48059 2026-06-15 10:56 2026-06-13 Show GitHub Exploit DB Packet Storm
230 5.4 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authe… Update CWE-863
 Incorrect Authorization 		CVE-2026-6269 2026-06-15 10:47 2026-06-11 Show GitHub Exploit DB Packet Storm