Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5641 2.4
Network
オラクル Oracle Database オラクルのOracle Databaseにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34312 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
5642 5.3 警告
Network
Electron electron Electronのelectronにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-34776 2026-04-28 10:13 2026-04-4 Show GitHub Exploit DB Packet Storm
5643 5.4 警告
Network
オラクル Oracle Fusion Middleware オラクルのOracle Fusion Middlewareにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35232 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
5644 6.4 警告
Network
オラクル Oracle Fusion Middleware オラクルのOracle Fusion Middlewareにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35252 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
5645 7.3 重要
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-35338 2026-04-28 10:13 2026-04-22 Show GitHub Exploit DB Packet Storm
5646 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理
CVE-2026-35346 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
5647 4.4 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-35347 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
5648 7.7 重要
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-35349 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
5649 4.2 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるパーミッションの不適切な保持に関する脆弱性 CWE-281
パーミッションの不適切な保持
CVE-2026-35351 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
5650 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態
CVE-2026-35353 2026-04-28 10:12 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 - - - Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Files managed by debusine are organized into artifacts. The endpoints that create and delete relation… New - CVE-2026-11852 2026-06-10 19:16 2026-06-10 Show GitHub Exploit DB Packet Storm
352 7.5 HIGH
Network
- - Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in… New CWE-125
Out-of-bounds Read
CVE-2026-9076 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
353 8.1 HIGH
Network
- - Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may… New CWE-787
 Out-of-bounds Write
CVE-2026-7383 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
354 4.8 MEDIUM
Network
- - Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext allowing a forgery of … New CWE-325
 Missing Required Cryptographic Step
CVE-2026-45446 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
355 7.5 HIGH
Network
- - Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Impact sum… New CWE-325
 Missing Required Cryptographic Step
CVE-2026-45445 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
356 6.2 MEDIUM
Local
- - Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out of bounds read can happen. Imp… New CWE-125
Out-of-bounds Read
CVE-2026-42771 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
357 3.7 LOW
Network
- - Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which present… New CWE-325
 Missing Required Cryptographic Step
CVE-2026-42770 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
358 5.3 MEDIUM
Network
- - Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certificate validation inef… New CWE-295
Improper Certificate Validation 
CVE-2026-42769 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
359 3.7 LOW
Network
- - Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/… New CWE-514
CVE-2026-42768 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm
360 5.9 MEDIUM
Network
- - Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference ca… New CWE-476
 NULL Pointer Dereference
CVE-2026-42767 2026-06-10 17:16 2026-06-10 Show GitHub Exploit DB Packet Storm