Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
711 4.8 警告
Network 		デル PowerFlex Manager デルのPowerFlex Managerにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2026-40641 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
712 8.8 重要
Network 		Eclipse Foundation Theia Eclipse FoundationのTheiaにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-44688 2026-06-24 09:59 2026-06-18 Show GitHub Exploit DB Packet Storm
713 8.8 重要
Network 		Eclipse Foundation Theia Eclipse FoundationのTheiaにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-44691 2026-06-24 09:59 2026-06-18 Show GitHub Exploit DB Packet Storm
714 8.8 重要
Network 		Eclipse Foundation Theia Eclipse FoundationのTheiaにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-46580 2026-06-24 09:59 2026-06-18 Show GitHub Exploit DB Packet Storm
715 8.1 重要
Adjacent 		デル PowerFlex Manager デルのPowerFlex Managerにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49502 2026-06-24 09:59 2026-06-17 Show GitHub Exploit DB Packet Storm
716 6.1 警告
Network 		Astro Astro Astroにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-50146 2026-06-24 09:59 2026-06-22 Show GitHub Exploit DB Packet Storm
717 6.1 警告
Network 		Astro Astro Astroにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-54298 2026-06-24 09:59 2026-06-22 Show GitHub Exploit DB Packet Storm
718 4.6 警告 Iomega ZIP drive for Iomega ZIP-100 disks IomegaのZIP drive for Iomega ZIP-100 disksにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-1174 2026-06-23 11:22 2001-12-21 Show GitHub Exploit DB Packet Storm
719 5 警告 oreilly WebSite
WebSite Pro 		oreillyのWebSite等の複数製品における不特定の脆弱性 CWE-Other
その他 		CVE-1999-1180 2026-06-23 11:22 1999-02-16 Show GitHub Exploit DB Packet Storm
720 5 警告 Maximizer Maximizer Enterprise MaximizerのMaximizer Enterpriseにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-1172 2026-06-23 11:22 1999-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191231 6.8 MEDIUM
Network 		elastic enterprise_search An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a maliciou… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-37940 2024-11-21 15:16 2021-12-8 Show GitHub Exploit DB Packet Storm
191232 7.5 HIGH
Network 		wipro holmes Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read application log files containing sensitive information via a predictable /log URI. CWE-306
Missing Authentication for Critical Function 		CVE-2021-38283 2024-11-21 15:16 2021-11-29 Show GitHub Exploit DB Packet Storm
191233 7.5 HIGH
Network 		wipro holmes Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for … CWE-306
Missing Authentication for Critical Function 		CVE-2021-38147 2024-11-21 15:16 2021-11-29 Show GitHub Exploit DB Packet Storm
191234 4.3 MEDIUM
Network 		google
debian 		chrome
debian_linux 		Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-38004 2024-11-21 15:16 2021-11-24 Show GitHub Exploit DB Packet Storm
191235 8.8 HIGH
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-38003 2024-11-21 15:16 2021-11-24 Show GitHub Exploit DB Packet Storm
191236 9.6 CRITICAL
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-38002 2024-11-21 15:16 2021-11-24 Show GitHub Exploit DB Packet Storm
191237 8.8 HIGH
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-843
Type Confusion 		CVE-2021-38001 2024-11-21 15:16 2021-11-24 Show GitHub Exploit DB Packet Storm
191238 6.1 MEDIUM
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page. CWE-79
Cross-site Scripting 		CVE-2021-37999 2024-11-21 15:16 2021-11-24 Show GitHub Exploit DB Packet Storm
191239 8.8 HIGH
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-37998 2024-11-21 15:16 2021-11-24 Show GitHub Exploit DB Packet Storm
191240 8.8 HIGH
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-37997 2024-11-21 15:16 2021-11-24 Show GitHub Exploit DB Packet Storm