Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221 4.5 警告
Adjacent 		ネットギア RBE970 FIRMWARE ネットギアのRBE970 FIRMWAREにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-0414 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
222 4.5 警告
Adjacent 		ネットギア RBRE950 FIRMWARE
RBR750 ファームウェア
RBS750 ファームウェア
RBS860 FIRMWARE
RBR860 FIRMWARE
RBE970 FIRMWARE
RBR840 ファームウェア
RBRE960 ファームウェア
RBSE960&n… 		ネットギアのRBE970 FIRMWARE等の複数製品における入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-0415 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
223 4.5 警告
Adjacent 		ネットギア RAXE450 Firmware
RAXE500 Firmware 		ネットギアのRAXE450 Firmware等の複数製品における入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-0416 2026-06-22 11:44 2026-06-9 Show GitHub Exploit DB Packet Storm
224 8 重要
Adjacent 		ネットギア JR6150 ファームウェア ネットギアのJR6150 ファームウェアにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-0419 2026-06-22 11:44 2026-06-9 Show GitHub Exploit DB Packet Storm
225 5.9 警告
Network 		ネットギア RAX35 ファームウェア
RAX38 ファームウェア 		ネットギアのRAX120 ファームウェア等の複数製品における暗号化処理の不備に関する脆弱性 New CWE-325
暗号化処理の不備 		CVE-2026-0420 2026-06-22 11:44 2026-06-9 Show GitHub Exploit DB Packet Storm
226 7.5 重要
Network 		Stichting NLnet Labs ldns NLnet LabsのLDNSにおける同一生成元ポリシー違反に関する脆弱性 New CWE-346
同一生成元ポリシー違反 		CVE-2026-10846 2026-06-22 11:44 2026-06-10 Show GitHub Exploit DB Packet Storm
227 7.2 重要
Network 		TP-LINK Technologies TL-WR940N ファームウェア TP-LINK TechnologiesのTL-WR940N ファームウェアにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-11409 2026-06-22 11:44 2026-06-17 Show GitHub Exploit DB Packet Storm
228 7.2 重要
Network 		TP-LINK Technologies TL-WR940N ファームウェア TP-LINK TechnologiesのTL-WR940N ファームウェアにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-11410 2026-06-22 11:44 2026-06-17 Show GitHub Exploit DB Packet Storm
229 6.5 警告
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-12105 2026-06-22 11:44 2026-06-16 Show GitHub Exploit DB Packet Storm
230 4.3 警告
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-12117 2026-06-22 11:44 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191381 4.6 MEDIUM
Physics 		xscreensaver_project
fedoraproject 		xscreensaver
fedora 		XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock auth… CWE-120
Classic Buffer Overflow 		CVE-2021-34557 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191382 6.8 MEDIUM
Physics 		netsetman netsetman An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able t… CWE-287
Improper Authentication 		CVE-2021-34546 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191383 7.5 HIGH
Network 		trusteddomain
fedoraproject 		opendmarc
fedora 		OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field. CWE-476
 NULL Pointer Dereference 		CVE-2021-34555 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191384 4.3 MEDIUM
Network 		paessler prtg_network_monitor PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation. CWE-352
 Origin Validation Error 		CVE-2021-34547 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191385 7.2 HIGH
Network 		cubecoders amp An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executable path can be set. The result is that high-privileged user… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-34539 2024-11-21 15:10 2021-06-10 Show GitHub Exploit DB Packet Storm
191386 9.1 CRITICAL
Network 		the_fuck_project
fedoraproject 		the_fuck
fedora 		The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature. CWE-22
Path Traversal 		CVE-2021-34363 2024-11-21 15:10 2021-06-10 Show GitHub Exploit DB Packet Storm
191387 6.1 MEDIUM
Network 		accela civic_platform Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the availa… CWE-79
Cross-site Scripting 		CVE-2021-34370 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm
191388 6.5 MEDIUM
Network 		accela civic_platform portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "… NVD-CWE-noinfo
CVE-2021-34369 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm
191389 6.1 MEDIUM
Network 		refined-github_project refined-github The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Content-Security-Policy headers to, in general, address XSS and other concerns. CWE-79
Cross-site Scripting 		CVE-2021-34364 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm
191390 7.8 HIGH
Local 		polarisoffice polaris_office Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someon… CWE-824
 Access of Uninitialized Pointer 		CVE-2021-34280 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm