Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
261 5.7 警告
Adjacent 		nuxt nuxt/webpack-builder
nuxt/rspack-builder 		Nuxtのnuxt/rspack-builder等の複数製品における危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開 		CVE-2026-49993 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
262 9.8 緊急
Network 		jmespath project jmespath JMESPathにおける複数の脆弱性 CWE-116
CWE-20
CWE-94
CVE-2026-54133 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
263 5.5 警告
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-24165 2026-06-16 13:39 2026-06-11 Show GitHub Exploit DB Packet Storm
264 5.5 警告
Local 		- アップルのmacOSにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2025-43278 2026-06-16 13:39 2026-06-11 Show GitHub Exploit DB Packet Storm
265 5.5 警告
Local 		- アップルのmacOSにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2025-46313 2026-06-16 13:39 2026-06-11 Show GitHub Exploit DB Packet Storm
266 7.2 重要
Network 		QNAP Systems QuTS hero QNAP SystemsのQuTS heroにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-62850 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
267 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-66273 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
268 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-66279 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
269 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品における複数の脆弱性 CWE-121
CWE-190
CVE-2025-66280 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
270 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-66281 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190971 9.8 CRITICAL
Network 		djangoproject
fedoraproject 		django
fedora 		Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application. CWE-89
SQL Injection 		CVE-2021-35042 2024-11-21 15:11 2021-07-2 Show GitHub Exploit DB Packet Storm
190972 9.8 CRITICAL
Network 		zyxel usg1900_firmware
usg1100_firmware
usg310_firmware
usg210_firmware
usg110_firmware
usg40_firmware
usg40w_firmware
usg60_firmware
usg60w_firmware
usg300_firmware
usg1000_f… 		An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 t… CWE-287
Improper Authentication 		CVE-2021-35029 2024-11-21 15:11 2021-07-2 Show GitHub Exploit DB Packet Storm
190973 8.8 HIGH
Network 		istio istio Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and DestinationRule credentialName field can be accessed from dif… NVD-CWE-noinfo
CVE-2021-34824 2024-11-21 15:11 2021-06-29 Show GitHub Exploit DB Packet Storm
190974 7.5 HIGH
Network 		fidelissecurity deception
network 		User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-35050 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190975 8.8 HIGH
Network 		fidelissecurity network
deception 		Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute… CWE-78
OS Command  		CVE-2021-35049 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190976 9.8 CRITICAL
Network 		fidelissecurity network
deception 		Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some v… CWE-89
SQL Injection 		CVE-2021-35048 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190977 8.8 HIGH
Network 		fidelissecurity network
deception 		Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the compon… CWE-78
OS Command  		CVE-2021-35047 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190978 7.5 HIGH
Network 		fisco-bcos fisco-bcos The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format… CWE-20
 Improper Input Validation  		CVE-2021-35041 2024-11-21 15:11 2021-06-24 Show GitHub Exploit DB Packet Storm
190979 6.1 MEDIUM
Network 		icehrm icehrm A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted session cookie. CWE-384
 Session Fixation 		CVE-2021-35046 2024-11-21 15:11 2021-06-22 Show GitHub Exploit DB Packet Storm
190980 6.1 MEDIUM
Network 		icehrm icehrm Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint. CWE-79
Cross-site Scripting 		CVE-2021-35045 2024-11-21 15:11 2021-06-22 Show GitHub Exploit DB Packet Storm