Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133961 6.5 警告
Network 		CKEditor Team CKEditor CKEditor における信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2021-26271 2021-10-13 14:05 2021-01-27 Show GitHub Exploit DB Packet Storm
133962 6.5 警告
Network 		CKEditor Team CKEditor CKEditor における信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2021-26272 2021-10-13 13:57 2021-01-27 Show GitHub Exploit DB Packet Storm
133963 8.1 重要
Network 		Wekan project Wekan Wekan における証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2021-3309 2021-10-13 13:48 2021-01-26 Show GitHub Exploit DB Packet Storm
133964 3.3 低
Local 		アドビシステムズ Adobe Acrobat Reader DC
Adobe Acrobat
Adobe Acrobat DC 		Adobe Reader および Acrobat における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2021-21089 2021-10-13 12:26 2021-02-9 Show GitHub Exploit DB Packet Storm
133965 9.1 緊急
Network 		日立
json-smart		 Hitachi Ops Center Common Services
json-smart-v2
json-smart-v1 		netplex json-smart-v1 および json-smart-v2 における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2021-27568 2021-10-12 18:02 2021-02-23 Show GitHub Exploit DB Packet Storm
133966 7.5 重要
Network 		日立
レッドハット		 Hitachi Ops Center Common Services
Keycloak 		Keycloak における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2021-20222 2021-10-12 18:02 2021-02-3 Show GitHub Exploit DB Packet Storm
133967 7.5 重要
Network 		日立
Apache Software Foundation		 Hitachi Ops Center Common Services
Apache CXF 		Apache CXF におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2021-22696 2021-10-12 18:02 2021-04-2 Show GitHub Exploit DB Packet Storm
133968 5.9 警告
Network 		インターネット技術タスクフォース (IETF)
microchip		 Microchip Libraries for Applications
Public-Key Cryptography Standards (PKCS) #1 		Microchip Libraries for Applications の RSA 用 PKCS #1 パディングにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2020-20950 2021-10-12 18:02 2020-08-13 Show GitHub Exploit DB Packet Storm
133969 5.4 警告
Network 		日立
レッドハット		 Hitachi Ops Center Common Services
Keycloak 		keycloak における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2020-1725 2021-10-12 18:02 2019-10-24 Show GitHub Exploit DB Packet Storm
133970 4.3 警告
Network 		日立
レッドハット		 Hitachi Ops Center Common Services
Red Hat Mobile Application Platform 		Red Hat Mobile Aplication Platform におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2020-1723 2021-10-12 18:02 2019-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 6.5 MEDIUM
Network 		mongodb mongodb The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechani… Update CWE-617
 Reachable Assertion 		CVE-2026-9748 2026-06-16 02:10 2026-06-10 Show GitHub Exploit DB Packet Storm
62 6.5 MEDIUM
Network 		mongodb mongodb An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in… Update CWE-617
 Reachable Assertion 		CVE-2026-9750 2026-06-16 02:10 2026-06-10 Show GitHub Exploit DB Packet Storm
63 7.5 HIGH
Network 		image-size image-size image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-… Update CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-71329 2026-06-16 02:09 2026-06-10 Show GitHub Exploit DB Packet Storm
64 8.8 HIGH
Network 		splunk splunk
splunk_cloud_platform
splunk_secure_gateway 		In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers… Update CWE-502
 Deserialization of Untrusted Data 		CVE-2026-20251 2026-06-16 02:08 2026-06-11 Show GitHub Exploit DB Packet Storm
65 7.5 HIGH
Network 		image-size image-size image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack… Update CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-71330 2026-06-16 02:00 2026-06-10 Show GitHub Exploit DB Packet Storm
66 6.5 MEDIUM
Network 		mongodb mongodb Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server. Update CWE-617
 Reachable Assertion 		CVE-2026-9747 2026-06-16 01:58 2026-06-10 Show GitHub Exploit DB Packet Storm
67 6.5 MEDIUM
Network 		mongodb mongodb In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may derefe… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-9743 2026-06-16 01:56 2026-06-10 Show GitHub Exploit DB Packet Storm
68 7.5 HIGH
Network 		mongodb mongodb A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain n… Update CWE-674
 Uncontrolled Recursion 		CVE-2026-9740 2026-06-16 01:55 2026-06-10 Show GitHub Exploit DB Packet Storm
69 7.6 HIGH
Network 		splunk splunk
splunk_cloud_platform 		In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privile… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-20252 2026-06-16 01:51 2026-06-11 Show GitHub Exploit DB Packet Storm
70 5.5 MEDIUM
Local 		mongodb mongodb MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parame… Update CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-9735 2026-06-16 01:46 2026-06-10 Show GitHub Exploit DB Packet Storm