Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228811	4.3	警告	Varnish Http Accelerator Integration Project	-	Drupal 用 Varnish モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0325	2013-04-1 14:41	2013-02-20	Show	GitHub Exploit DB Packet Storm

228812	2.1	注意	Tomasbarej	-	Drupal 用 Menu Reference モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0324	2013-04-1 14:40	2013-02-20	Show	GitHub Exploit DB Packet Storm

228813	4.3	警告	Kristof De Jaeger	-	Drupal 用 Display Suite モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0323	2013-04-1 14:39	2013-02-20	Show	GitHub Exploit DB Packet Storm

228814	4.3	警告	Ubercart	-	Drupal 用 Ubercart モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0322	2013-04-1 14:38	2013-02-20	Show	GitHub Exploit DB Packet Storm

228815	4.3	警告	Mads Peter Henderson	-	Drupal 用 Ubercart Views モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0321	2013-04-1 14:37	2013-02-20	Show	GitHub Exploit DB Packet Storm

228816	5.1	警告	mattias hutterer	-	Drupal 用 Taxonomy Manager モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0320	2013-04-1 14:37	2013-02-20	Show	GitHub Exploit DB Packet Storm

228817	4.3	警告	Yandex.Metrics Pproject	-	Drupal 用 Yandex.Metrics モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0319	2013-04-1 14:36	2013-02-19	Show	GitHub Exploit DB Packet Storm

228818	10	危険	Banckle Chat Project	-	Drupal 用 Banckle Chat モジュールにおける制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0318	2013-04-1 14:17	2013-02-13	Show	GitHub Exploit DB Packet Storm

228819	4.3	警告	Joe Haskins	-	Drupal 用 Manager Change for Organic Groups モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0317	2013-04-1 14:16	2013-02-12	Show	GitHub Exploit DB Packet Storm

228820	5	警告	Drupal	-	Drupal の Image モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0316	2013-04-1 14:15	2013-02-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1241	5.5	MEDIUM Local	nsa	ghidra	Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. Attackers can craft malicious Rust symbol names…	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-52753	2026-06-12 04:52	2026-06-10	Show	GitHub Exploit DB Packet Storm

1242	5.7	MEDIUM Adjacent	microsoft	windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2022 windows_server_2025	Incorrect calculation of buffer size in Windows TCP/IP allows an authorized attacker to deny service over an adjacent network.	CWE-131 Incorrect Calculation of Buffer Size	CVE-2026-42915	2026-06-12 04:52	2026-06-10	Show	GitHub Exploit DB Packet Storm

1243	7.8	HIGH Local	nsa	ghidra	Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with travers…	CWE-22 Path Traversal	CVE-2026-52752	2026-06-12 04:52	2026-06-10	Show	GitHub Exploit DB Packet Storm

1244	8.8	HIGH Network	nsa	ghidra	Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a maliciou…	CWE-502 Deserialization of Untrusted Data	CVE-2026-52751	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

1245	5.3	MEDIUM Network	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Windows Kerberos Denial of Service Vulnerability	CWE-125 Out-of-bounds Read	CVE-2026-42914	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

1246	7.8	HIGH Local	nsa	ghidra	Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands und…	CWE-88 Argument Injection	CVE-2026-52750	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

1247	8.8	HIGH Network	nsa	ghidra	Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE …	CWE-89 SQL Injection	CVE-2026-49498	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

1248	3.3	LOW Local	nsa	ghidra	Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attacke…	CWE-22 Path Traversal	CVE-2026-49497	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

1249	6.1	MEDIUM Local	nsa	ghidra	Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vecto…	CWE-416 Use After Free	CVE-2026-49496	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

1250	5.5	MEDIUM Local	nsa	ghidra	Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O b…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-49495	2026-06-12 04:49	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed