Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188081 6.5 警告
Network 		Evergreen ILS - Evergreen における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2013-7435 2018-03-5 17:25 2013-07-30 Show GitHub Exploit DB Packet Storm
188082 8.6 重要
Network 		Linux
インテル
DPDK		 - 複数のベンダの NIC ファームウェアの Linux kernel ixgbe ドライバなどにおけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2015-1142857 2018-03-5 17:17 2015-08-12 Show GitHub Exploit DB Packet Storm
188083 6.1 警告
Network 		Atlassian - Atlassian Confluence Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-18086 2018-03-5 17:04 2018-02-2 Show GitHub Exploit DB Packet Storm
188084 4.3 警告
Network 		Atlassian - Atlassian Bitbucket Server におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2017-18036 2018-03-5 17:04 2018-02-2 Show GitHub Exploit DB Packet Storm
188085 4.3 警告
Network 		Atlassian - Atlassian FishEye および Crucible における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-18035 2018-03-5 17:04 2018-01-18 Show GitHub Exploit DB Packet Storm
188086 5.9 警告
Network 		Linux - Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-16914 2018-03-5 16:56 2017-12-20 Show GitHub Exploit DB Packet Storm
188087 5.9 警告
Network 		Linux - Linux Kernel におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-16913 2018-03-5 16:56 2017-12-20 Show GitHub Exploit DB Packet Storm
188088 5.9 警告
Network 		Linux - Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-16912 2018-03-5 16:56 2017-12-20 Show GitHub Exploit DB Packet Storm
188089 4.7 警告
Local 		Linux - Linux Kernel における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-16911 2018-03-5 16:56 2017-12-20 Show GitHub Exploit DB Packet Storm
188090 5.4 警告
Network 		IBM - IBM Emptoris Sourcing におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2016-0329 2018-03-5 16:53 2016-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 5.3 MEDIUM
Network 		wolfssl wolfssl Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS n… New CWE-295
Improper Certificate Validation  		CVE-2026-10592 2026-06-27 03:55 2026-06-26 Show GitHub Exploit DB Packet Storm
12 7.5 HIGH
Network 		wolfssl wolfssl X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra (OPENSSL_EXTRA) and whose application vali… New CWE-295
Improper Certificate Validation  		CVE-2026-11310 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
13 7.5 HIGH
Network 		microsoft cost_management Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network. New CWE-200
Information Exposure 		CVE-2026-47633 2026-06-27 03:54 2026-06-19 Show GitHub Exploit DB Packet Storm
14 7.5 HIGH
Network 		wolfssl wolfssl Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of … New CWE-125
Out-of-bounds Read 		CVE-2026-12340 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
15 7.5 HIGH
Network 		wolfssl wolfssl Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but fails to return, so ex… New CWE-393
CWE-787
 Return of Wrong Status Code
 Out-of-bounds Write 		CVE-2026-55958 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
16 7.5 HIGH
Network 		wolfssl wolfssl Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation. A raw public key has no chain, so ParseCertRelative() accepts it without performing any … New CWE-295
Improper Certificate Validation  		CVE-2026-55960 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
17 5.3 MEDIUM
Network 		wolfssl wolfssl Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have the keyCertSign key usage when a Key Usage extension is present, but chain-s… New CWE-295
Improper Certificate Validation  		CVE-2026-55964 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm
18 5.5 MEDIUM
Local 		jqlang jq jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is … New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-54679 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm
19 7.1 HIGH
Local 		jqlang jq jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds… New CWE-787
 Out-of-bounds Write 		CVE-2026-49839 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm
20 5.5 MEDIUM
Local 		jqlang jq jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface, resulting in deni… New CWE-674
 Uncontrolled Recursion 		CVE-2026-47770 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm