Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
31 9.3 緊急
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-46785 2026-06-22 11:55 2026-06-17 Show GitHub Exploit DB Packet Storm
32 9.6 緊急
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-46786 2026-06-22 11:55 2026-06-17 Show GitHub Exploit DB Packet Storm
33 8 重要
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-46787 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
34 8.4 重要
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46788 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
35 9.6 緊急
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおける重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-46789 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
36 5.3 警告
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-46790 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
37 7.5 重要
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46791 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
38 9.9 緊急
Network 		オラクル Oracle Identity Manager Connector オラクルのOracle Identity Manager Connectorにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46792 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
39 9.9 緊急
Network 		オラクル Oracle Identity Manager Connector オラクルのOracle Identity Manager Connectorにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46793 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
40 9.9 緊急
Network 		オラクル Oracle Identity Manager Connector オラクルのOracle Identity Manager Connectorにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-46794 2026-06-22 11:54 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190971 9.8 CRITICAL
Network 		djangoproject
fedoraproject 		django
fedora 		Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application. CWE-89
SQL Injection 		CVE-2021-35042 2024-11-21 15:11 2021-07-2 Show GitHub Exploit DB Packet Storm
190972 9.8 CRITICAL
Network 		zyxel usg1900_firmware
usg1100_firmware
usg310_firmware
usg210_firmware
usg110_firmware
usg40_firmware
usg40w_firmware
usg60_firmware
usg60w_firmware
usg300_firmware
usg1000_f… 		An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 t… CWE-287
Improper Authentication 		CVE-2021-35029 2024-11-21 15:11 2021-07-2 Show GitHub Exploit DB Packet Storm
190973 8.8 HIGH
Network 		istio istio Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and DestinationRule credentialName field can be accessed from dif… NVD-CWE-noinfo
CVE-2021-34824 2024-11-21 15:11 2021-06-29 Show GitHub Exploit DB Packet Storm
190974 7.5 HIGH
Network 		fidelissecurity deception
network 		User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-35050 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190975 8.8 HIGH
Network 		fidelissecurity network
deception 		Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute… CWE-78
OS Command  		CVE-2021-35049 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190976 9.8 CRITICAL
Network 		fidelissecurity network
deception 		Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some v… CWE-89
SQL Injection 		CVE-2021-35048 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190977 8.8 HIGH
Network 		fidelissecurity network
deception 		Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the compon… CWE-78
OS Command  		CVE-2021-35047 2024-11-21 15:11 2021-06-25 Show GitHub Exploit DB Packet Storm
190978 7.5 HIGH
Network 		fisco-bcos fisco-bcos The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format… CWE-20
 Improper Input Validation  		CVE-2021-35041 2024-11-21 15:11 2021-06-24 Show GitHub Exploit DB Packet Storm
190979 6.1 MEDIUM
Network 		icehrm icehrm A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted session cookie. CWE-384
 Session Fixation 		CVE-2021-35046 2024-11-21 15:11 2021-06-22 Show GitHub Exploit DB Packet Storm
190980 6.1 MEDIUM
Network 		icehrm icehrm Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint. CWE-79
Cross-site Scripting 		CVE-2021-35045 2024-11-21 15:11 2021-06-22 Show GitHub Exploit DB Packet Storm