Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 29, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 561 | 7.5 |
重要
Network |
n8n | n8n | n8nにおける高圧縮データの処理 (データ増幅)に関する脆弱性 |
CWE-409
高圧縮データの不適切な処理 (データ増幅) |
CVE-2026-54314 | 2026-06-26 11:54 | 2026-06-23 | Show | GitHub Exploit DB Packet Storm |
| 562 | 5.5 |
警告
Local |
pypdf project | pypdf | pypdf projectのpypdfにおける無限ループに関する脆弱性 |
CWE-835
無限ループ |
CVE-2026-54530 | 2026-06-26 11:54 | 2026-06-22 | Show | GitHub Exploit DB Packet Storm |
| 563 | 5.5 |
警告
Local |
pypdf project | pypdf | pypdf projectのpypdfにおける無限ループに関する脆弱性 |
CWE-835
無限ループ |
CVE-2026-54531 | 2026-06-26 11:54 | 2026-06-22 | Show | GitHub Exploit DB Packet Storm |
| 564 | 5.5 |
警告
Local |
pypdf project | pypdf | pypdf projectのpypdfにおける無限ループに関する脆弱性 |
CWE-835
無限ループ |
CVE-2026-54651 | 2026-06-26 11:54 | 2026-06-22 | Show | GitHub Exploit DB Packet Storm |
| 565 | 5.3 |
警告
Network |
Apache Software Foundation | Apache NiFi | Apache Software FoundationのApache NiFiにおける同一生成元ポリシー違反に関する脆弱性 |
CWE-346
同一生成元ポリシー違反 |
CVE-2026-54665 | 2026-06-26 11:54 | 2026-06-22 | Show | GitHub Exploit DB Packet Storm |
| 566 | 9.9 |
緊急
Network |
langflow | langflow | langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-55255 | 2026-06-26 11:54 | 2026-06-23 | Show | GitHub Exploit DB Packet Storm |
| 567 | 6.1 |
警告
Physics |
langflow | langflow | langflowにおけるセッション期限に関する脆弱性 |
CWE-613
不適切なセッション期限 |
CVE-2026-55423 | 2026-06-26 11:54 | 2026-06-23 | Show | GitHub Exploit DB Packet Storm |
| 568 | 7.5 |
重要
Network |
langflow | langflow | langflowにおけるリソースの枯渇に関する脆弱性 |
CWE-400
リソースの枯渇 |
CVE-2026-55446 | 2026-06-26 11:54 | 2026-06-23 | Show | GitHub Exploit DB Packet Storm |
| 569 | 9.6 |
緊急
Network |
langflow | langflow | langflowにおける複数の脆弱性 |
CWE-200 CWE-61 |
CVE-2026-55447 | 2026-06-26 11:54 | 2026-06-23 | Show | GitHub Exploit DB Packet Storm |
| 570 | 9.3 |
緊急
Network |
langflow | langflow | langflowにおける複数の脆弱性 |
CWE-200 CWE-306 CWE-400 |
CVE-2026-55450 | 2026-06-26 11:54 | 2026-06-23 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 29, 2026, 4:19 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 190691 | 6.3 |
MEDIUM
Network |
xstream_project debian fedoraproject netapp oracle |
xstream debian_linux fedora snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on… | - | CVE-2021-39140 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190692 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39154 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190693 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39153 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190694 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework retail_xstore_point_of_service communications_unified_inventory_management communications_billing_… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39151 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190695 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39149 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190696 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39148 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190697 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39147 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190698 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework retail_xstore_point_of_service communications_unified_inventory_management communications_billing_… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39146 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190699 | 8.5 |
HIGH
Network |
xstream_project debian fedoraproject netapp oracle |
xstream debian_linux fedora snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39145 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190700 | 8.5 |
HIGH
Network |
xstream_project debian fedoraproject netapp oracle |
xstream debian_linux fedora snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only … |
CWE-306 CWE-502 Missing Authentication for Critical Function Deserialization of Untrusted Data |
CVE-2021-39144 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |