Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
134401 7.8 重要
Local
- Dell EMC PowerScale OneFS における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2020-26192 2021-10-26 16:51 2020-09-30 Show GitHub Exploit DB Packet Storm
134402 7.8 重要
Local
- Dell EMC PowerScale OneFS における脆弱性 CWE-noinfo
情報不足
CVE-2020-26191 2021-10-26 16:51 2020-09-30 Show GitHub Exploit DB Packet Storm
134403 6.1 警告
Network
b2evolution b2evolution CMS b2evolution cms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2020-22839 2021-10-26 16:51 2020-08-13 Show GitHub Exploit DB Packet Storm
134404 8.8 重要
Network
PHPSHE PHPSHE PHPSHE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2020-18215 2021-10-26 16:51 2020-08-13 Show GitHub Exploit DB Packet Storm
134405 9.8 緊急
Network
WAVLINK WN575A4 ファームウェア
WN579X3 ファームウェア
Wavlink WN575A4 および WN579X3 デバイスにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2020-13117 2021-10-26 16:51 2020-04-15 Show GitHub Exploit DB Packet Storm
134406 7.1 重要
Local
SolarWinds Serv-U SolarWinds Serv-U における重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納
CVE-2021-25276 2021-10-26 16:42 2021-02-3 Show GitHub Exploit DB Packet Storm
134407 5.5 警告
Local
Fedora Project
GNOME Project
gnome-autoar
Fedora
GNOME gnome-autoar におけるパストラバーサルの脆弱性 CWE-22
CWE-59
CVE-2020-36241 2021-10-26 16:36 2020-11-16 Show GitHub Exploit DB Packet Storm
134408 7 重要
Local
Linux Linux Kernel Linux Kernel における権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2021-26708 2021-10-26 16:21 2021-02-3 Show GitHub Exploit DB Packet Storm
134409 7.5 重要
Network
FiberHome Technologies Group HG6245D ファームウェア FiberHome HG6245D デバイスにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2021-27175 2021-10-26 16:20 2021-01-12 Show GitHub Exploit DB Packet Storm
134410 7.5 重要
Network
FiberHome Technologies Group HG6245D ファームウェア FiberHome HG6245D デバイスにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2021-27174 2021-10-26 16:20 2021-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
511 7.5 HIGH
Network
- - Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions. CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-52695 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
512 8.5 HIGH
Network
- - Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions. CWE-89
SQL Injection
CVE-2026-52697 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
513 7.5 HIGH
Network
- - Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-52699 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
514 8.5 HIGH
Network
- - Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions. CWE-89
SQL Injection
CVE-2026-52700 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
515 7.1 HIGH
Network
- - Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions. CWE-79
Cross-site Scripting
CVE-2026-52702 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
516 9.6 CRITICAL
Network
- - Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. CWE-35
 Path Traversal: '.../...//'
CVE-2026-52703 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
517 9.8 CRITICAL
Network
- - Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 versions. CWE-502
 Deserialization of Untrusted Data
CVE-2026-9691 2026-06-16 06:24 2026-06-16 Show GitHub Exploit DB Packet Storm
518 6.5 MEDIUM
Network
- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the Nezha dashboard exposes two endpoints that create long-… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-53522 2026-06-16 06:17 2026-06-13 Show GitHub Exploit DB Packet Storm
519 7.1 HIGH
Network
- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results fo… CWE-862
 Missing Authorization
CVE-2026-48119 2026-06-16 06:17 2026-06-13 Show GitHub Exploit DB Packet Storm
520 - - - PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection vulnerability in the password reset endpoint allows any authenticated user to change the password of… CWE-20
CWE-943
 Improper Input Validation 
 Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-47181 2026-06-16 06:17 2026-06-12 Show GitHub Exploit DB Packet Storm