Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
811 8.8 重要
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-7387 2026-06-22 11:46 2026-06-12 Show GitHub Exploit DB Packet Storm
812 6.5 警告
Adjacent
TP-LINK Technologies Tapo C520WS Firmware TP-LINK TechnologiesのTapo C520WS Firmwareにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-8714 2026-06-22 11:46 2026-06-5 Show GitHub Exploit DB Packet Storm
813 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信
CVE-2026-9741 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
814 5.9 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性 CWE-1287
指定されたタイプの入力に対する不適切な検証
CVE-2026-9742 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
815 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション
CVE-2026-9746 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
816 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション
CVE-2026-9749 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
817 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-9752 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
818 8.1 重要
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける複数の脆弱性 CWE-1287
CWE-787
CVE-2026-9753 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
819 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける初期化されていない変数の使用に関する脆弱性 CWE-457
初期化されていない変数の使用
CVE-2026-9754 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
820 7.8 重要
Local
Google Android GoogleのAndroidにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-0143 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191091 3.7 LOW
Network
tonewinner winner_desktop_speakers_firmware Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowwor… NVD-CWE-noinfo
CVE-2021-38365 2024-11-21 15:16 2021-08-10 Show GitHub Exploit DB Packet Storm
191092 7.5 HIGH
Network
contiki-os contiki In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-38311 2024-11-21 15:16 2021-08-10 Show GitHub Exploit DB Packet Storm
191093 7.8 HIGH
Local
23andme yamale 23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a crafted schema file. The schema parser uses eval as part of its processing, and tries to protect from malicious exp… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2021-38305 2024-11-21 15:16 2021-08-10 Show GitHub Exploit DB Packet Storm
191094 8.1 HIGH
Network
thedaylightstudio fuel_cms A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php. An attacker can use a man in the middle atta… CWE-74
Injection
CVE-2021-38290 2024-11-21 15:16 2021-08-9 Show GitHub Exploit DB Packet Storm
191095 3.3 LOW
Local
linux linux_kernel net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is re… CWE-203
 Information Exposure Through Discrepancy
CVE-2021-38209 2024-11-21 15:16 2021-08-9 Show GitHub Exploit DB Packet Storm
191096 5.5 MEDIUM
Local
linux linux_kernel net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain typ… CWE-476
 NULL Pointer Dereference
CVE-2021-38208 2024-11-21 15:16 2021-08-9 Show GitHub Exploit DB Packet Storm
191097 7.5 HIGH
Network
linux linux_kernel drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for a… CWE-120
Classic Buffer Overflow
CVE-2021-38207 2024-11-21 15:16 2021-08-9 Show GitHub Exploit DB Packet Storm
191098 5.5 MEDIUM
Local
linux linux_kernel The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser)… CWE-476
 NULL Pointer Dereference
CVE-2021-38206 2024-11-21 15:16 2021-08-9 Show GitHub Exploit DB Packet Storm
191099 3.3 LOW
Local
linux
debian
linux_kernel
debian_linux
drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real… CWE-824
 Access of Uninitialized Pointer
CVE-2021-38205 2024-11-21 15:16 2021-08-9 Show GitHub Exploit DB Packet Storm
191100 6.8 MEDIUM
Physics
linux
debian
linux_kernel
debian_linux
drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in cer… CWE-416
 Use After Free
CVE-2021-38204 2024-11-21 15:16 2021-08-9 Show GitHub Exploit DB Packet Storm