Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3091 5.9 警告
Network 		Teluu Ltd. PJSIP Teluu Ltd.のPJSIPにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-42225 2026-05-14 10:18 2026-05-7 Show GitHub Exploit DB Packet Storm
3092 4.3 警告
Network 		Onyx Onyx Onyxにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42276 2026-05-14 10:18 2026-05-8 Show GitHub Exploit DB Packet Storm
3093 6.5 警告
Network 		Onyx Onyx Onyxにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42277 2026-05-14 10:18 2026-05-8 Show GitHub Exploit DB Packet Storm
3094 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-42308 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
3095 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-42309 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
3096 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-42310 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
3097 8.1 重要
Network 		Grav CMS grav Grav CMSのgravにおける複数の脆弱性 CWE-269
CWE-285
CWE-639
CWE-837
CVE-2026-42609 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3098 6.5 警告
Network 		Grav CMS grav Grav CMSのgravにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-42610 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3099 8.9 重要
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42611 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3100 5.4 警告
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42612 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312321 - - - A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker w… CWE-20
 Improper Input Validation  		CVE-2021-1462 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312322 6.1 MEDIUM
Network 		- - A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote at… CWE-79
Cross-site Scripting 		CVE-2021-1444 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312323 4.3 MEDIUM
Network 		- - A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2021-1425 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312324 4.3 MEDIUM
Network 		- - A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their organiz… CWE-284
Improper Access Control 		CVE-2021-1410 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312325 6.5 MEDIUM
Adjacent 		- - Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, ad… CWE-120
Classic Buffer Overflow 		CVE-2021-1379 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312326 5.4 MEDIUM
Network 		- - A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system witho… CWE-269
 Improper Privilege Management 		CVE-2020-26063 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312327 5.3 MEDIUM
Network 		- - A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is du… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-26062 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312328 - - - Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated, adjacent attacker to cause a denial of se… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-1285 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312329 5.3 MEDIUM
Network 		- - A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be af… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2021-1234 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312330 6.5 MEDIUM
Network 		- - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of an af… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-1232 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm