Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 29, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1501 | 8.8 |
重要
Network |
オラクル | Oracle Outsourced Manufacturing for Discrete Industries | オラクルのOracle Outsourced Manufacturing for Discrete Industriesにおける複数の脆弱性 |
CWE-269 CWE-287 CWE-306 |
CVE-2026-46973 | 2026-06-22 11:33 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
| 1502 | 7.2 |
重要
Network |
オラクル | Public Sector Payroll | オラクルのPublic Sector Payrollにおけるアクセス制御に関する脆弱性 |
CWE-284
不適切なアクセス制御 |
CVE-2026-46976 | 2026-06-22 11:33 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
| 1503 | 4.4 |
警告
Network |
metal3 | ip-address-manager | Metal3のip-address-managerにおける不要な特権による実行に関する脆弱性 |
CWE-250
不要な特権による実行 |
CVE-2026-47190 | 2026-06-22 11:32 | 2026-06-12 | Show | GitHub Exploit DB Packet Storm |
| 1504 | 9.1 |
緊急
Network |
i18next | i18next-fs-backend | i18nextのi18next-fs-backendにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 |
CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) |
CVE-2026-48713 | 2026-06-22 11:32 | 2026-06-15 | Show | GitHub Exploit DB Packet Storm |
| 1505 | 9.1 |
緊急
Network |
i18next | i18next-http-middleware | i18nextのi18next-http-middlewareにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 |
CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) |
CVE-2026-48714 | 2026-06-22 11:32 | 2026-06-15 | Show | GitHub Exploit DB Packet Storm |
| 1506 | 9.1 |
緊急
Network |
Apache Software Foundation | Airflow SFTP Providers (apache-airflow-providers-sftp) | Apache Software FoundationのAirflow SFTP Providers (apache-airflow-providers-sftp)におけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-50203 | 2026-06-22 11:32 | 2026-06-17 | Show | GitHub Exploit DB Packet Storm |
| 1507 | 7.5 |
重要
Network |
マイクロソフト |
Microsoft Windows Server 2022 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 22h2 Microsoft … |
Windows NTLM のなりすましの脆弱性 |
CWE-200 CWE-noinfo |
CVE-2026-50508 | 2026-06-22 11:32 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
| 1508 | 7.5 |
重要
Network |
LLDAP | lldap | LLDAPのlldapにおけるリソースの枯渇に関する脆弱性 |
CWE-400
リソースの枯渇 |
CVE-2026-50889 | 2026-06-22 11:32 | 2026-06-15 | Show | GitHub Exploit DB Packet Storm |
| 1509 | 4.5 |
警告
Adjacent |
ネットギア |
R6900P ファームウェア RAXE450 Firmware R7960P ファームウェア R7000 ファームウェア rax42 ファームウェア mr80 ファームウェア MR70 FIRMWARE MR60 ファームウェア MS60 ファームウェア
ネットギアのEX3700 ファームウェア等の複数製品における入力確認に関する脆弱性
|
CWE-20
|
不適切な入力確認
CVE-2026-9210
|
2026-06-22 11:32 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1510 | 8.8 |
重要
Adjacent |
ネットギア |
RAXE300 ファームウェア RAX30 ファームウェア CAX30 ファームウェア RAX5 FIRMWARE |
ネットギアのCAX30 ファームウェア等の複数製品における入力確認に関する脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2026-9211 | 2026-06-22 11:32 | 2026-06-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 30, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 4011 | - | - | - | A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges. |
CWE-639
Authorization Bypass Through User-Controlled Key |
CVE-2026-6444 | 2026-06-11 05:13 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm | |
| 4012 | - | - | - | A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges. |
CWE-939
Improper Authorization in Handler for Custom URL Scheme |
CVE-2026-6445 | 2026-06-11 05:13 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm | |
| 4013 | - | - | - | CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an… |
CWE-250
Execution with Unnecessary Privileges |
CVE-2026-11626 | 2026-06-11 05:13 | 2026-06-11 | Show | GitHub Exploit DB Packet Storm | |
| 4014 | 7.8 |
HIGH
Local |
microsoft |
windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025 |
Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CWE-843
Type Confusion |
CVE-2026-45600 | 2026-06-11 05:03 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |
| 4015 | 7.8 |
HIGH
Local |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2016 windows_server_2019 w… |
Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. |
CWE-501
Trust Boundary Violation |
CVE-2026-33828 | 2026-06-11 05:00 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |
| 4016 | 7.0 |
HIGH
Local |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w… |
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CWE-416
Use After Free |
CVE-2026-34335 | 2026-06-11 04:59 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |
| 4017 | 7.8 |
HIGH
Local |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w… |
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CWE-122 CWE-197 Heap-based Buffer Overflow Numeric Truncation Error |
CVE-2026-40404 | 2026-06-11 04:58 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |
| 4018 | 7.8 |
HIGH
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CWE-126
Buffer Over-read |
CVE-2026-42828 | 2026-06-11 04:56 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |
| 4019 | 5.5 |
MEDIUM
Local |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w… |
Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally. |
CWE-200
Information Exposure |
CVE-2026-42972 | 2026-06-11 04:55 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |
| 4020 | 5.5 |
MEDIUM
Local |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2016 windows_server_2019 w… |
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CWE-200
Information Exposure |
CVE-2026-42973 | 2026-06-11 04:54 | 2026-06-10 | Show | GitHub Exploit DB Packet Storm |