Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1361 7.8 重要
Local 		4mhz Base64 Decoder 4mhzのBase64 Decoderにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25634 2026-06-5 10:52 2026-03-24 Show GitHub Exploit DB Packet Storm
1362 7.8 重要
Local 		Google Android XR GoogleのAndroid XRにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-0072 2026-06-5 10:52 2026-06-1 Show GitHub Exploit DB Packet Storm
1363 9.8 緊急
Network 		TRENDnet TEW-432BRP Firmware TRENDnetのTEW-432BRP Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-10060 2026-06-5 10:52 2026-05-29 Show GitHub Exploit DB Packet Storm
1364 9.8 緊急
Network 		TRENDnet TEW-432BRP Firmware TRENDnetのTEW-432BRP Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-10061 2026-06-5 10:52 2026-05-29 Show GitHub Exploit DB Packet Storm
1365 9.8 緊急
Network 		TRENDnet TEW-432BRP Firmware TRENDnetのTEW-432BRP Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-10062 2026-06-5 10:52 2026-05-29 Show GitHub Exploit DB Packet Storm
1366 9.8 緊急
Network 		TRENDnet TEW-432BRP Firmware TRENDnetのTEW-432BRP Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-10063 2026-06-5 10:52 2026-05-29 Show GitHub Exploit DB Packet Storm
1367 9.8 緊急
Network 		TRENDnet TEW-432BRP Firmware TRENDnetのTEW-432BRP Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-10064 2026-06-5 10:52 2026-05-29 Show GitHub Exploit DB Packet Storm
1368 9.8 緊急
Network 		Thingino Thingino Firmware ThinginoのThingino FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-26213 2026-06-5 10:52 2026-03-26 Show GitHub Exploit DB Packet Storm
1369 7.5 重要
Network 		MessagePack MessagePack shamatonのMessagePackにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-32284 2026-06-5 10:52 2026-03-26 Show GitHub Exploit DB Packet Storm
1370 7.5 重要
Network 		pgproto3 project pgproto3 Jackcのpgproto3における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-32286 2026-06-5 10:52 2026-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 9.1 CRITICAL
Network 		- - Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by n… New CWE-93
CRLF Injection 		CVE-2026-50638 2026-06-12 05:16 2026-06-11 Show GitHub Exploit DB Packet Storm
582 8.2 HIGH
Network 		- - Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions) allow mutiple metrics,separated by newlines, to be sent p… New CWE-93
CRLF Injection 		CVE-2026-50637 2026-06-12 05:16 2026-06-11 Show GitHub Exploit DB Packet Storm
583 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… New - CVE-2026-12038 2026-06-12 05:16 2026-06-12 Show GitHub Exploit DB Packet Storm
584 4.0 MEDIUM
Local 		nsa ghidra Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability s… Update CWE-758
 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior 		CVE-2024-58350 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
585 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. Update CWE-190
 Integer Overflow or Wraparound 		CVE-2026-42916 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
586 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally. Update CWE-125
Out-of-bounds Read 		CVE-2026-42968 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
587 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w… 		Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. Update CWE-908
 Use of Uninitialized Resource 		CVE-2026-42969 2026-06-12 04:53 2026-06-10 Show GitHub Exploit DB Packet Storm
588 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. Update CWE-200
Information Exposure 		CVE-2026-42970 2026-06-12 04:52 2026-06-10 Show GitHub Exploit DB Packet Storm
589 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w… 		Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. Update CWE-200
Information Exposure 		CVE-2026-42971 2026-06-12 04:52 2026-06-10 Show GitHub Exploit DB Packet Storm
590 7.8 HIGH
Local 		nsa ghidra Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious… Update CWE-22
Path Traversal 		CVE-2026-52755 2026-06-12 04:52 2026-06-10 Show GitHub Exploit DB Packet Storm