Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性 New CWE-693
保護メカニズムの不具合 		CVE-2026-12302 2026-06-22 11:44 2026-06-16 Show GitHub Exploit DB Packet Storm
242 9.1 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における同一生成元ポリシー違反に関する脆弱性 New CWE-346
同一生成元ポリシー違反 		CVE-2026-12304 2026-06-22 11:44 2026-06-16 Show GitHub Exploit DB Packet Storm
243 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 New CWE-119
バッファエラー 		CVE-2026-12305 2026-06-22 11:44 2026-06-16 Show GitHub Exploit DB Packet Storm
244 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 New CWE-119
バッファエラー 		CVE-2026-12306 2026-06-22 11:43 2026-06-16 Show GitHub Exploit DB Packet Storm
245 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 New CWE-119
バッファエラー 		CVE-2026-12307 2026-06-22 11:43 2026-06-16 Show GitHub Exploit DB Packet Storm
246 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 New CWE-119
バッファエラー 		CVE-2026-12308 2026-06-22 11:43 2026-06-16 Show GitHub Exploit DB Packet Storm
247 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 New CWE-119
バッファエラー 		CVE-2026-12309 2026-06-22 11:43 2026-06-16 Show GitHub Exploit DB Packet Storm
248 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 New CWE-119
CWE-125
CWE-416
CWE-787
CVE-2026-12310 2026-06-22 11:43 2026-06-16 Show GitHub Exploit DB Packet Storm
249 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 New CWE-119
バッファエラー 		CVE-2026-12312 2026-06-22 11:43 2026-06-16 Show GitHub Exploit DB Packet Storm
250 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 New CWE-119
CWE-125
CWE-416
CWE-787
CVE-2026-12314 2026-06-22 11:43 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191381 4.6 MEDIUM
Physics 		xscreensaver_project
fedoraproject 		xscreensaver
fedora 		XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock auth… CWE-120
Classic Buffer Overflow 		CVE-2021-34557 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191382 6.8 MEDIUM
Physics 		netsetman netsetman An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able t… CWE-287
Improper Authentication 		CVE-2021-34546 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191383 7.5 HIGH
Network 		trusteddomain
fedoraproject 		opendmarc
fedora 		OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field. CWE-476
 NULL Pointer Dereference 		CVE-2021-34555 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191384 4.3 MEDIUM
Network 		paessler prtg_network_monitor PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation. CWE-352
 Origin Validation Error 		CVE-2021-34547 2024-11-21 15:10 2021-06-11 Show GitHub Exploit DB Packet Storm
191385 7.2 HIGH
Network 		cubecoders amp An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executable path can be set. The result is that high-privileged user… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-34539 2024-11-21 15:10 2021-06-10 Show GitHub Exploit DB Packet Storm
191386 9.1 CRITICAL
Network 		the_fuck_project
fedoraproject 		the_fuck
fedora 		The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature. CWE-22
Path Traversal 		CVE-2021-34363 2024-11-21 15:10 2021-06-10 Show GitHub Exploit DB Packet Storm
191387 6.1 MEDIUM
Network 		accela civic_platform Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the availa… CWE-79
Cross-site Scripting 		CVE-2021-34370 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm
191388 6.5 MEDIUM
Network 		accela civic_platform portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "… NVD-CWE-noinfo
CVE-2021-34369 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm
191389 6.1 MEDIUM
Network 		refined-github_project refined-github The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Content-Security-Policy headers to, in general, address XSS and other concerns. CWE-79
Cross-site Scripting 		CVE-2021-34364 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm
191390 7.8 HIGH
Local 		polarisoffice polaris_office Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someon… CWE-824
 Access of Uninitialized Pointer 		CVE-2021-34280 2024-11-21 15:10 2021-06-9 Show GitHub Exploit DB Packet Storm