Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
11 7.5 重要
Network 		マイクロソフト Microsoft Windows 11 26h1
Microsoft Windows Server 2022
Microsoft Windows 10 22h2
Microsoft Windows 10 1607
Microsoft Wind… 		Windows リモート デスクトップ プロトコル (RDP) の情報漏えいの脆弱性 New CWE-125
境界外読み取り 		CVE-2026-45639 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
12 7.8 重要
Local 		マイクロソフト Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft Office 365
Microsoft Office 2024 Long-Term Servicing Ch… 		Microsoft Office のリモート コードが実行される脆弱性 New CWE-787
CWE-822
CVE-2026-45645 2026-06-22 11:56 2026-06-9 Show GitHub Exploit DB Packet Storm
13 7 重要
Local 		マイクロソフト Microsoft Defender for Endpoint Microsoft Defender for Endpoint for Mac の特権の昇格の脆弱性 New CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-45647 2026-06-22 11:55 2026-06-9 Show GitHub Exploit DB Packet Storm
14 7.1 重要
Local 		マイクロソフト Microsoft Word
Microsoft Excel
Microsoft PowerPoint 		Office for Android のなりすましの脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-45649 2026-06-22 11:55 2026-06-9 Show GitHub Exploit DB Packet Storm
15 6.8 警告
Network 		Discourse Discourse Discourseにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-45775 2026-06-22 11:55 2026-06-12 Show GitHub Exploit DB Packet Storm
16 9.9 緊急
Network 		オラクル Oracle WebCenter Portal オラクルのOracle WebCenter Portalにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46765 2026-06-22 11:55 2026-06-17 Show GitHub Exploit DB Packet Storm
17 9.8 緊急
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46766 2026-06-22 11:55 2026-06-17 Show GitHub Exploit DB Packet Storm
18 9.9 緊急
Network 		オラクル Oracle WebCenter Portal オラクルのOracle WebCenter Portalにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46767 2026-06-22 11:55 2026-06-17 Show GitHub Exploit DB Packet Storm
19 6 警告
Local 		オラクル Oracle VM VirtualBox オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46768 2026-06-22 11:55 2026-06-17 Show GitHub Exploit DB Packet Storm
20 7.2 重要
Network 		オラクル Oracle Application Development Framework (Oracle ADF) オラクルのOracle Application Development Framework (Oracle ADF)におけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46769 2026-06-22 11:55 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190951 7.8 HIGH
Local 		foxit
foxitsoftware 		pdf_reader
pdf_editor 		This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the… - CVE-2021-34832 2024-11-21 15:11 2021-08-5 Show GitHub Exploit DB Packet Storm
190952 7.8 HIGH
Local 		foxit
foxitsoftware 		pdf_reader
pdf_editor 		This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.4.37651. User interaction is required to exploit this vulnerability in that the tar… - CVE-2021-34831 2024-11-21 15:11 2021-08-5 Show GitHub Exploit DB Packet Storm
190953 8.8 HIGH
Network 		neo4j graph_databse A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges. CWE-269
 Improper Privilege Management 		CVE-2021-34802 2024-11-21 15:11 2021-07-30 Show GitHub Exploit DB Packet Storm
190954 4.3 MEDIUM
Adjacent 		zyxel gs1900-8_firmware
gs1900-8hp_firmware
gs1900-10hp_firmware
gs1900-16_firmware
gs1900-24e_firmware
gs1900-24ep_firmware
gs1900-24_firmware
gs1900-24hp_firmware
gs1900-24hpv2_fi… 		A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-… CWE-79
Cross-site Scripting 		CVE-2021-35030 2024-11-21 15:11 2021-07-26 Show GitHub Exploit DB Packet Storm
190955 7.5 HIGH
Network 		oisf
debian
fedoraproject 		suricata
debian_linux
fedora 		Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." NVD-CWE-noinfo
CVE-2021-35063 2024-11-21 15:11 2021-07-23 Show GitHub Exploit DB Packet Storm
190956 7.2 HIGH
Network 		etherpad etherpad An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source. CWE-88
Argument Injection 		CVE-2021-34816 2024-11-21 15:11 2021-07-22 Show GitHub Exploit DB Packet Storm
190957 7.5 HIGH
Network 		minecraft minecraft Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files. CWE-22
Path Traversal 		CVE-2021-35054 2024-11-21 15:11 2021-07-20 Show GitHub Exploit DB Packet Storm
190958 6.1 MEDIUM
Network 		aat novus_management_system Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2. The WebUI has wrong HTTP 404 error handling implemented. A remote, unauthenticated attacker may be able … CWE-79
Cross-site Scripting 		CVE-2021-34821 2024-11-21 15:11 2021-07-20 Show GitHub Exploit DB Packet Storm
190959 7.5 HIGH
Network 		aat novus_management_system Web Path Directory Traversal in the Novus HTTP Server. The Novus HTTP Server is affected by the Directory Traversal for Arbitrary File Access vulnerability. A remote, unauthenticated attacker using a… CWE-22
Path Traversal 		CVE-2021-34820 2024-11-21 15:11 2021-07-20 Show GitHub Exploit DB Packet Storm
190960 6.1 MEDIUM
Network 		etherpad etherpad A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad. CWE-79
Cross-site Scripting 		CVE-2021-34817 2024-11-21 15:11 2021-07-19 Show GitHub Exploit DB Packet Storm