Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1681	3.1	低 Network	Django Software Foundation	Django	Django Software FoundationのDjangoにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-7666	2026-06-8 12:30	2026-06-3	Show	GitHub Exploit DB Packet Storm

1682	5.5	警告 Local	日本ナショナルインスツルメンツ	NI-PAL	日本ナショナルインスツルメンツのNI-PALにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-8035	2026-06-8 12:30	2026-06-2	Show	GitHub Exploit DB Packet Storm

1683	7.8	重要 Local	日本ナショナルインスツルメンツ	NI-PAL	日本ナショナルインスツルメンツのNI-PALにおける入力で指定されたインデックス、位置、またはオフセットの不適切な検証に関する脆弱性	CWE-1285 入力で指定されたインデックス、位置、またはオフセットの不適切な検証	CVE-2026-8036	2026-06-8 12:30	2026-06-2	Show	GitHub Exploit DB Packet Storm

1684	9.8	緊急 Network	IBM	IBM Aspera High-Speed Transfer Server IBM Aspera High-Speed Transfer Endpoint	IBMのIBM Aspera High-Speed Transfer Endpoint等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-8175	2026-06-8 12:30	2026-05-27	Show	GitHub Exploit DB Packet Storm

1685	8.8	重要 Network	IBM	IBM Aspera High-Speed Transfer Server IBM Aspera High-Speed Transfer Endpoint	IBMのIBM Aspera High-Speed Transfer Endpoint等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-8179	2026-06-8 12:30	2026-05-27	Show	GitHub Exploit DB Packet Storm

1686	7.5	重要 Network	IBM	IBM Aspera High-Speed Transfer Server IBM Aspera High-Speed Transfer Endpoint	IBMのIBM Aspera High-Speed Transfer Endpoint等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-8180	2026-06-8 12:30	2026-05-27	Show	GitHub Exploit DB Packet Storm

1687	5.3	警告 Network	Django Software Foundation	Django	Django Software FoundationのDjangoにおける大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-8404	2026-06-8 12:30	2026-06-3	Show	GitHub Exploit DB Packet Storm

1688	6.5	警告 Network	IBM	IBM Aspera High-Speed Transfer Server IBM Aspera High-Speed Transfer Endpoint	IBMのIBM Aspera High-Speed Transfer Endpoint等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-9035	2026-06-8 12:30	2026-05-27	Show	GitHub Exploit DB Packet Storm

1689	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-9122	2026-06-8 12:30	2026-05-20	Show	GitHub Exploit DB Packet Storm

1690	7.5	重要 Adjacent	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-9123	2026-06-8 12:30	2026-05-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
320241	6.5	MEDIUM Adjacent	zephyrproject	zephyr	BT: Classic: SDP OOB access in get_att_search_list	CWE-787 Out-of-bounds Write	CVE-2024-6137	2024-09-19 10:33	2024-09-14	Show	GitHub Exploit DB Packet Storm

320242	6.5	MEDIUM Network	microfocus	edirectory	Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.	CWE-521 Weak Password Requirements	CVE-2021-38133	2024-09-19 06:05	2024-09-12	Show	GitHub Exploit DB Packet Storm

320243	9.8	CRITICAL Network	microfocus	edirectory	Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-38132	2024-09-19 06:04	2024-09-12	Show	GitHub Exploit DB Packet Storm

320244	6.1	MEDIUM Network	microfocus	edirectory	Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.	CWE-79 Cross-site Scripting	CVE-2021-38131	2024-09-19 06:00	2024-09-12	Show	GitHub Exploit DB Packet Storm

320245	6.1	MEDIUM Network	i-doit	i-doit	Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the …	CWE-79 Cross-site Scripting	CVE-2024-8750	2024-09-19 05:38	2024-09-12	Show	GitHub Exploit DB Packet Storm

320246	5.3	MEDIUM Network	ordat	ordat.erp	User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password func…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-34336	2024-09-19 05:32	2024-09-13	Show	GitHub Exploit DB Packet Storm

320247	6.1	MEDIUM Network	ordat	ordat.erp	ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.	CWE-79 Cross-site Scripting	CVE-2024-34335	2024-09-19 05:32	2024-09-13	Show	GitHub Exploit DB Packet Storm

320248	7.5	HIGH Network	ordat	ordat.erp	ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.	CWE-89 SQL Injection	CVE-2024-34334	2024-09-19 05:32	2024-09-13	Show	GitHub Exploit DB Packet Storm

320249	9.8	CRITICAL Network	soplanning	soplanning	A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this vulnerability, an attacker can upload executable files that are moved to a publ…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-27115	2024-09-19 05:32	2024-09-11	Show	GitHub Exploit DB Packet Storm

320250	3.1	LOW Network	keyfactor	ejbca	The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CM…	NVD-CWE-noinfo	CVE-2024-36066	2024-09-19 05:28	2024-09-13	Show	GitHub Exploit DB Packet Storm