Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1361 7.5 重要
Network 		オラクル Oracle Identity Manager オラクルのOracle Identity Managerにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35269 2026-06-22 11:40 2026-06-17 Show GitHub Exploit DB Packet Storm
1362 9.1 緊急
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35270 2026-06-22 11:40 2026-06-17 Show GitHub Exploit DB Packet Storm
1363 7.5 重要
Local 		オラクル Oracle VM VirtualBox オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35275 2026-06-22 11:40 2026-06-17 Show GitHub Exploit DB Packet Storm
1364 9.8 緊急
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35286 2026-06-22 11:40 2026-06-17 Show GitHub Exploit DB Packet Storm
1365 6.6 警告
Network 		オラクル Oracle WebLogic Server オラクルのOracle WebLogic Serverにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-35291 2026-06-22 11:40 2026-06-17 Show GitHub Exploit DB Packet Storm
1366 10 緊急
Network 		オラクル Oracle WebLogic Server オラクルのOracle WebLogic Serverにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35292 2026-06-22 11:40 2026-06-17 Show GitHub Exploit DB Packet Storm
1367 9.8 緊急
Network 		- オラクルのOracle WebCenter Sites Support Toolsにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35293 2026-06-22 11:39 2026-06-17 Show GitHub Exploit DB Packet Storm
1368 9.9 緊急
Network 		オラクル Oracle Identity Manager オラクルのOracle Identity Managerにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35294 2026-06-22 11:39 2026-06-17 Show GitHub Exploit DB Packet Storm
1369 7.5 重要
Network 		- オラクルのOracle WebCenter Sites Support Toolsにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35295 2026-06-22 11:39 2026-06-17 Show GitHub Exploit DB Packet Storm
1370 9.8 緊急
Network 		- オラクルのOracle WebCenter Sites Support Toolsにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35296 2026-06-22 11:39 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4011 - - - A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-6444 2026-06-11 05:13 2026-06-10 Show GitHub Exploit DB Packet Storm
4012 - - - A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges. CWE-939
 Improper Authorization in Handler for Custom URL Scheme 		CVE-2026-6445 2026-06-11 05:13 2026-06-10 Show GitHub Exploit DB Packet Storm
4013 - - - CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an… CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-11626 2026-06-11 05:13 2026-06-11 Show GitHub Exploit DB Packet Storm
4014 7.8 HIGH
Local 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. CWE-843
Type Confusion 		CVE-2026-45600 2026-06-11 05:03 2026-06-10 Show GitHub Exploit DB Packet Storm
4015 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w… 		Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. CWE-501
 Trust Boundary Violation 		CVE-2026-33828 2026-06-11 05:00 2026-06-10 Show GitHub Exploit DB Packet Storm
4016 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-34335 2026-06-11 04:59 2026-06-10 Show GitHub Exploit DB Packet Storm
4017 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability CWE-122
CWE-197
Heap-based Buffer Overflow
 Numeric Truncation Error 		CVE-2026-40404 2026-06-11 04:58 2026-06-10 Show GitHub Exploit DB Packet Storm
4018 7.8 HIGH
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2025 		Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. CWE-126
 Buffer Over-read 		CVE-2026-42828 2026-06-11 04:56 2026-06-10 Show GitHub Exploit DB Packet Storm
4019 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally. CWE-200
Information Exposure 		CVE-2026-42972 2026-06-11 04:55 2026-06-10 Show GitHub Exploit DB Packet Storm
4020 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w… 		Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. CWE-200
Information Exposure 		CVE-2026-42973 2026-06-11 04:54 2026-06-10 Show GitHub Exploit DB Packet Storm