Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
701 7.5 重要
Network 		デル PowerFlex Manager デルのPowerFlex Managerにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-22283 2026-06-24 10:00 2026-06-17 Show GitHub Exploit DB Packet Storm
702 6.5 警告
Network 		Eclipse Foundation Theia Eclipse FoundationのTheiaにおける複数の脆弱性 CWE-201
CWE-829
CVE-2026-22551 2026-06-24 10:00 2026-06-18 Show GitHub Exploit DB Packet Storm
703 5.4 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-32208 2026-06-24 10:00 2026-06-19 Show GitHub Exploit DB Packet Storm
704 8.1 重要
Adjacent 		デル PowerFlex Manager デルのPowerFlex Managerにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-32804 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
705 8.8 重要
Adjacent 		デル PowerFlex Manager デルのPowerFlex Managerにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35065 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
706 7.1 重要
Network 		デル PowerFlex Manager デルのPowerFlex Managerにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35066 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
707 8 重要
Adjacent 		デル PowerFlex Manager デルのPowerFlex Managerにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35067 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
708 5.7 警告
Adjacent 		デル PowerFlex Manager デルのPowerFlex ManagerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-35068 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
709 8 重要
Adjacent 		デル PowerFlex Manager デルのPowerFlex ManagerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-35069 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
710 6.5 警告
Network 		デル PowerFlex Manager デルのPowerFlex Managerにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35162 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191301 9.8 CRITICAL
Network 		roxy-wi roxy-wi Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication. CWE-89
SQL Injection 		CVE-2021-38167 2024-11-21 15:16 2021-08-8 Show GitHub Exploit DB Packet Storm
191302 7.8 HIGH
Local 		linux
fedoraproject
debian 		linux_kernel
fedora
debian_linux 		In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impracti… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2021-38166 2024-11-21 15:16 2021-08-8 Show GitHub Exploit DB Packet Storm
191303 5.3 MEDIUM
Network 		lynx_project
debian
fedoraproject 		lynx
debian_linux
fedora 		Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data. CWE-522
 Insufficiently Protected Credentials 		CVE-2021-38165 2024-11-21 15:16 2021-08-8 Show GitHub Exploit DB Packet Storm
191304 9.8 CRITICAL
Network 		progress moveit_transfer In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web application could allow an unauthenticated remote attacker to gain access to the da… CWE-89
SQL Injection 		CVE-2021-38159 2024-11-21 15:16 2021-08-8 Show GitHub Exploit DB Packet Storm
191305 7.8 HIGH
Local 		linux
netapp
debian
redhat 		linux_kernel
hci_bootstrap_os
solidfire
hci_management_node
element_software
debian_linux
enterprise_linux 		In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the… CWE-120
Classic Buffer Overflow 		CVE-2021-38160 2024-11-21 15:16 2021-08-7 Show GitHub Exploit DB Packet Storm
191306 9.8 CRITICAL
Network 		obsidian obsidian Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs. NVD-CWE-noinfo
CVE-2021-38148 2024-11-21 15:16 2021-08-7 Show GitHub Exploit DB Packet Storm
191307 6.1 MEDIUM
Network 		leostream connection_broker LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects products that are no longer supported by t… CWE-79
Cross-site Scripting 		CVE-2021-38157 2024-11-21 15:16 2021-08-7 Show GitHub Exploit DB Packet Storm
191308 7.5 HIGH
Network 		openstack keystone OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2021-38155 2024-11-21 15:16 2021-08-7 Show GitHub Exploit DB Packet Storm
191309 8.1 HIGH
Network 		corero securewatch_managed_services Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role. CWE-863
 Incorrect Authorization 		CVE-2021-38137 2024-11-21 15:16 2021-08-7 Show GitHub Exploit DB Packet Storm
191310 6.5 MEDIUM
Network 		corero securewatch_managed_services Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A ‘low pr… CWE-22
Path Traversal 		CVE-2021-38136 2024-11-21 15:16 2021-08-7 Show GitHub Exploit DB Packet Storm