Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
311 7.5 重要
Network 		マイクロソフト Microsoft Windows 10 1607
Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft … 		リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-44799 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
312 5.3 警告
Network 		kjd internationalized domain names in applications kjdのinternationalized domain names in applicationsにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-45409 2026-06-16 13:37 2026-06-5 Show GitHub Exploit DB Packet Storm
313 4.3 警告
Network 		マイクロソフト Bing Microsoft Bing Search のなりすましの脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-45650 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
314 5.4 警告
Network 		nuxt nuxt NuxtにおけるWeb ページの属性に対するスクリプトの不適切な無害化に関する脆弱性 CWE-83
Web ページの属性に対するスクリプトの不適切な無害化 		CVE-2026-45669 2026-06-16 13:37 2026-06-12 Show GitHub Exploit DB Packet Storm
315 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-46476 2026-06-16 13:37 2026-06-8 Show GitHub Exploit DB Packet Storm
316 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-46477 2026-06-16 13:37 2026-06-8 Show GitHub Exploit DB Packet Storm
317 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-46478 2026-06-16 13:37 2026-06-8 Show GitHub Exploit DB Packet Storm
318 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-46479 2026-06-16 13:37 2026-06-8 Show GitHub Exploit DB Packet Storm
319 5.3 警告
Local 		Vim Vim Vimにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-47167 2026-06-16 13:37 2026-06-11 Show GitHub Exploit DB Packet Storm
320 9.6 緊急
Network 		マイクロソフト Visual Studio Code Visual Studio Code の特権の昇格の脆弱性 CWE-306
CWE-798
CWE-862
CVE-2026-47281 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190971 9.8 CRITICAL
Network 		djangoproject
fedoraproject 		django
fedora 		Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application. CWE-89
SQL Injection 		CVE-2021-35042 2024-11-21 15:11 2021-07-2 Show GitHub Exploit DB Packet Storm
190972 9.8 CRITICAL
Network 		zyxel usg1900_firmware
usg1100_firmware
usg310_firmware
usg210_firmware
usg110_firmware
usg40_firmware
usg40w_firmware
usg60_firmware
usg60w_firmware
usg300_firmware
usg1000_f… 		An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 t… CWE-287
Improper Authentication 		CVE-2021-35029 2024-11-21 15:11 2021-07-2 Show GitHub Exploit DB Packet Storm
190973 8.8 HIGH
Network 		istio istio Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and DestinationRule credentialName field can be accessed from dif… NVD-CWE-noinfo
CVE-2021-34824 2024-11-21 15:11 2021-06-29 Show GitHub Exploit DB Packet Storm
190974 7.5 HIGH
Network 		fidelissecurity deception
network 		User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-35050 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190975 8.8 HIGH
Network 		fidelissecurity network
deception 		Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute… CWE-78
OS Command  		CVE-2021-35049 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190976 9.8 CRITICAL
Network 		fidelissecurity network
deception 		Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some v… CWE-89
SQL Injection 		CVE-2021-35048 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190977 8.8 HIGH
Network 		fidelissecurity network
deception 		Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the compon… CWE-78
OS Command  		CVE-2021-35047 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190978 7.5 HIGH
Network 		fisco-bcos fisco-bcos The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format… CWE-20
 Improper Input Validation  		CVE-2021-35041 2024-11-21 15:11 2021-06-24 Show GitHub Exploit DB Packet Storm
190979 6.1 MEDIUM
Network 		icehrm icehrm A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted session cookie. CWE-384
 Session Fixation 		CVE-2021-35046 2024-11-21 15:11 2021-06-22 Show GitHub Exploit DB Packet Storm
190980 6.1 MEDIUM
Network 		icehrm icehrm Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint. CWE-79
Cross-site Scripting 		CVE-2021-35045 2024-11-21 15:11 2021-06-22 Show GitHub Exploit DB Packet Storm