Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
71 5.4 警告
Network 		Jenkins プロジェクト EC2 Fleet JenkinsのEC2 Fleetにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-57295 2026-06-29 11:22 2026-06-24 Show GitHub Exploit DB Packet Storm
72 4.2 警告
Network 		Jenkins プロジェクト Zowe zDevOps JenkinsのZowe zDevOpsにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-57306 2026-06-29 11:22 2026-06-24 Show GitHub Exploit DB Packet Storm
73 4.2 警告
Network 		Jenkins プロジェクト Zowe zDevOps JenkinsのZowe zDevOpsにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-57307 2026-06-29 11:22 2026-06-24 Show GitHub Exploit DB Packet Storm
74 7.5 重要
Network 		Nokogiri project Nokogiri NokogiriにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-57434 2026-06-29 11:22 2026-06-25 Show GitHub Exploit DB Packet Storm
75 7.5 重要
Network 		Nokogiri project Nokogiri Nokogiriにおける複数の脆弱性 New CWE-416
CWE-825
CVE-2026-57435 2026-06-29 11:22 2026-06-25 Show GitHub Exploit DB Packet Storm
76 5.3 警告
Network 		Nokogiri project Nokogiri Nokogiriにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-57436 2026-06-29 11:22 2026-06-25 Show GitHub Exploit DB Packet Storm
77 5.3 警告
Network 		Nokogiri project Nokogiri Nokogiriにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-57437 2026-06-29 11:22 2026-06-25 Show GitHub Exploit DB Packet Storm
78 6.6 警告
Local 		Nokogiri project Nokogiri Nokogiriにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-57438 2026-06-29 11:22 2026-06-25 Show GitHub Exploit DB Packet Storm
79 7.8 重要
Local 		AnyDesk AnyDesk AnyDeskにおける引用されない検索パスまたは要素に関する脆弱性 New CWE-428
引用されない検索パスまたは要素 		CVE-2016-20094 2026-06-29 11:22 2026-06-19 Show GitHub Exploit DB Packet Storm
80 5.4 警告
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-37256 2026-06-29 11:22 2026-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190621 5.3 MEDIUM
Network 		atlassian jira
data_center
jira_server 		Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration vulnerability in the password reset page. The affecte… NVD-CWE-noinfo
CVE-2021-39125 2024-11-21 15:18 2021-09-14 Show GitHub Exploit DB Packet Storm
190622 4.3 MEDIUM
Network 		atlassian data_center
jira 		The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request… CWE-352
 Origin Validation Error 		CVE-2021-39124 2024-11-21 15:18 2021-09-14 Show GitHub Exploit DB Packet Storm
190623 7.5 HIGH
Network 		atlassian data_center
jira 		Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the /rest/gad… NVD-CWE-noinfo
CVE-2021-39123 2024-11-21 15:18 2021-09-14 Show GitHub Exploit DB Packet Storm
190624 5.3 MEDIUM
Network 		atlassian data_center
jira 		Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration vulnerability in the /rest/api/1.0/render endpoi… NVD-CWE-noinfo
CVE-2021-39118 2024-11-21 15:18 2021-09-14 Show GitHub Exploit DB Packet Storm
190625 9.8 CRITICAL
Network 		apartment_visitors_management_system_project apartment_visitors_management_system SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE. CWE-89
SQL Injection 		CVE-2021-38833 2024-11-21 15:18 2021-09-14 Show GitHub Exploit DB Packet Storm
190626 3.6 LOW
Local 		imagemagick imagemagick ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected ve… - CVE-2021-39212 2024-11-21 15:18 2021-09-14 Show GitHub Exploit DB Packet Storm
190627 8.8 HIGH
Network 		facebook parlai parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by… - CVE-2021-39207 2024-11-21 15:18 2021-09-11 Show GitHub Exploit DB Packet Storm
190628 8.6 HIGH
Network 		envoyproxy
pomerium 		envoy
pomerium 		Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization related vulnerabilities CVE-2021-32777 and CVE-2021-32779. This may lead to incor… - CVE-2021-39206 2024-11-21 15:18 2021-09-10 Show GitHub Exploit DB Packet Storm
190629 7.5 HIGH
Network 		envoyproxy
pomerium 		envoy
pomerium 		Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams with excessive complexity. This can lead to high CPU utiliza… CWE-834
 Excessive Iteration 		CVE-2021-39204 2024-11-21 15:18 2021-09-10 Show GitHub Exploit DB Packet Storm
190630 6.5 MEDIUM
Network 		wordpress wordpress WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated users who don't have permission to view pr… NVD-CWE-noinfo
CVE-2021-39203 2024-11-21 15:18 2021-09-10 Show GitHub Exploit DB Packet Storm