Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
134271	3.3	低 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2021-39858	2021-11-2 16:56	2021-09-14	Show	GitHub Exploit DB Packet Storm

134272	4.3	警告 Network	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における情報を公開される脆弱性	CWE-200 情報漏えい	CVE-2021-39857	2021-11-2 16:56	2021-09-14	Show	GitHub Exploit DB Packet Storm

134273	6.5	警告 Network	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における情報を公開される脆弱性	CWE-200 情報漏えい	CVE-2021-39856	2021-11-2 16:56	2021-09-14	Show	GitHub Exploit DB Packet Storm

134274	5.5	警告 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-39854	2021-11-2 16:56	2021-09-14	Show	GitHub Exploit DB Packet Storm

134275	5.5	警告 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-39853	2021-11-2 16:56	2021-09-14	Show	GitHub Exploit DB Packet Storm

134276	5.3	警告 Network	MB CONNECT LINE	mbCONNECT24 mymbCONNECT24	MB CONNECT LINE 製 mymbCONNECT24 および mbCONNECT24 におけるリクエストの直接送信に関する脆弱性	CWE-425 リクエストの直接送信	CVE-2020-35570	2021-11-2 16:54	2020-07-16	Show	GitHub Exploit DB Packet Storm

134277	7.8	重要 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2021-39863	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

134278	7.8	重要 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2021-39842	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

134279	5.5	警告 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-39852	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

134280	5.5	警告 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2021-39861	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
771	4.3	MEDIUM Network	-	-	Gogs is an open source self-hosted Git service. In 0.14.3 and earlier, any authenticated user can watch a private repository they have no access to, because the access check in the Watch API handler … New	CWE-863 Incorrect Authorization	CVE-2026-52795	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

772	-		-	-	Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from outside the contai… New	CWE-183 CWE-918 Permissive List of Allowed Inputs Server-Side Request Forgery (SSRF)	CVE-2026-50189	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

773	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, UnsafeBlitFormatterBase<T>.Deserialize reads an attacker-controlled byteLength from an extension payload and allocat… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-48514	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

774	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, runtime-generated union deserializers emitted by DynamicUnionResolver do not call MessagePackSecurity.DepthStep(ref … New	CWE-674 Uncontrolled Recursion	CVE-2026-48513	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

775	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePack-CSharp's JSON conversion helpers contain multiple recursion paths that do not consistently enforce a dep… New	CWE-674 Uncontrolled Recursion	CVE-2026-48512	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

776	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, ExpandoObjectFormatter.Deserialize populates System.Dynamic.ExpandoObject by calling IDictionary<string, object>.Add… New	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-48511	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

777	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, when MessagePack-CSharp decompresses Lz4Block or Lz4BlockArray payloads, it reads declared uncompressed lengths from… New	CWE-409 CWE-770 Improper Handling of Highly Compressed Data (Data Amplification) Allocation of Resources Without Limits or Throttling	CVE-2026-48510	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

778	9.1	CRITICAL Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, the parameterless MessagePackInputFormatter() constructor uses default serializer options, which resolve to MessageP… New	CWE-1188 Insecure Default Initialization of Resource	CVE-2026-48509	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

779	4.4	MEDIUM Network	-	-	Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into <a… New	CWE-79 Cross-site Scripting	CVE-2026-47733	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

780	-		-	-	Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12, Rocket.Chat allows users deactivated through… New	CWE-613 Insufficient Session Expiration	CVE-2026-45757	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm