Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-12289 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
222 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 New CWE-125
CWE-416
CWE-787
CVE-2026-12298 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
223 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における型の取り違えに関する脆弱性 New CWE-843
型の取り違え 		CVE-2026-12299 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
224 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-12303 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
225 4.7 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 New CWE-200
CWE-688
CVE-2026-12311 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
226 4.7 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-12313 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
227 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-12319 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
228 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-12320 2026-06-17 15:34 2026-06-16 Show GitHub Exploit DB Packet Storm
229 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における常に不適切な制御フローの実装に関する脆弱性 New CWE-670
常に不適切な制御フローの実装 		CVE-2026-12321 2026-06-17 15:34 2026-06-16 Show GitHub Exploit DB Packet Storm
230 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 New CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-12322 2026-06-17 15:34 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191151 7.8 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		Windows Graphics Component Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-34530 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191152 8.1 HIGH
Network 		microsoft dynamics_365 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-34524 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191153 7.0 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		Windows Event Tracing Elevation of Privilege Vulnerability CWE-269
 Improper Privilege Management 		CVE-2021-34487 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191154 7.8 HIGH
Local 		microsoft windows_10_20h2
windows_10_1809
windows_10_1909
windows_10_21h1
windows_10_2004
windows_server_2004
windows_server_20h2
windows_server_2019 		Windows Event Tracing Elevation of Privilege Vulnerability CWE-416
 Use After Free 		CVE-2021-34486 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191155 5.0 MEDIUM
Local 		microsoft visual_studio_2017
visual_studio_2019
.net
.net_core
powershell_core 		.NET Core and Visual Studio Information Disclosure Vulnerability NVD-CWE-noinfo
CVE-2021-34485 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191156 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		Windows Print Spooler Elevation of Privilege Vulnerability CWE-269
 Improper Privilege Management 		CVE-2021-34483 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191157 6.8 MEDIUM
Network 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		Scripting Engine Memory Corruption Vulnerability CWE-787
 Out-of-bounds Write 		CVE-2021-34480 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191158 7.8 HIGH
Local 		microsoft office
365_apps 		Microsoft Office Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-34478 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191159 7.8 HIGH
Local 		microsoft malware_protection_engine Microsoft Windows Defender Elevation of Privilege Vulnerability CWE-269
 Improper Privilege Management 		CVE-2021-34471 2024-11-21 15:10 2021-08-13 Show GitHub Exploit DB Packet Storm
191160 6.1 MEDIUM
Network 		securimage-wp-fixed_project securimage-wp-fixed The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitr… CWE-79
Cross-site Scripting 		CVE-2021-34640 2024-11-21 15:10 2021-08-12 Show GitHub Exploit DB Packet Storm