Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
132661 4.6 警告
Network
オラクル Oracle Secure Global Desktop Oracle Virtualization の Oracle Secure Global Desktop における Client に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35650 2021-10-28 10:42 2021-10-19 Show GitHub Exploit DB Packet Storm
132662 5.4 警告
Network
オラクル Oracle Secure Global Desktop Oracle Virtualization の Oracle Secure Global Desktop における Server に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35649 2021-10-28 10:42 2021-10-19 Show GitHub Exploit DB Packet Storm
132663 4.9 警告
Network
NetApp
オラクル
SnapCenter
MySQL
OnCommand Insight
Oracle MySQL の MySQL Server における Server: FTS に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35648 2021-10-28 10:42 2021-10-19 Show GitHub Exploit DB Packet Storm
132664 4.9 警告
Network
NetApp
オラクル
SnapCenter
MySQL
OnCommand Insight
Oracle MySQL の MySQL Server における Server: Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35647 2021-10-28 10:42 2021-10-19 Show GitHub Exploit DB Packet Storm
132665 4.9 警告
Network
NetApp
オラクル
SnapCenter
MySQL
OnCommand Insight
Oracle MySQL の MySQL Server における Server: Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35646 2021-10-28 10:42 2021-10-19 Show GitHub Exploit DB Packet Storm
132666 4.9 警告
Network
NetApp
オラクル
SnapCenter
MySQL
OnCommand Insight
Oracle MySQL の MySQL Server における Server: Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35645 2021-10-28 10:42 2021-10-19 Show GitHub Exploit DB Packet Storm
132667 9.8 緊急
Network
Schneider Electric EcoStruxure Operator Terminal Expert
Pro-face BLUE
EcoStruxure Operator Terminal Expert および Pro-face BLUE における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2020-28221 2021-10-28 10:34 2020-11-5 Show GitHub Exploit DB Packet Storm
132668 5.9 警告
Network
オラクル Oracle HTTP Server Oracle Fusion Middleware の Oracle HTTP Server における OSSL Module に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35666 2021-10-27 18:11 2021-10-19 Show GitHub Exploit DB Packet Storm
132669 6.1 警告
Network
オラクル Oracle Hyperion Financial Reporting Oracle Hyperion の Hyperion Financial Reporting における Repository に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35665 2021-10-27 18:11 2021-10-19 Show GitHub Exploit DB Packet Storm
132670 7.5 重要
Network
オラクル Oracle Outside In Technology Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性 CWE-noinfo
情報不足
CVE-2021-35662 2021-10-27 18:11 2021-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 7.3 HIGH
Network
apache http_server Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are rec… New CWE-126
 Buffer Over-read
CVE-2026-44185 2026-06-11 13:01 2026-06-9 Show GitHub Exploit DB Packet Storm
302 5.5 MEDIUM
Local
apache http_server Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTT… New CWE-269
 Improper Privilege Management
CVE-2026-44119 2026-06-11 13:01 2026-06-9 Show GitHub Exploit DB Packet Storm
303 6.5 MEDIUM
Network
apache http_server Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. New CWE-125
Out-of-bounds Read
CVE-2026-43951 2026-06-11 13:00 2026-06-9 Show GitHub Exploit DB Packet Storm
304 8.1 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the chatflow update endpoint of FlowiseAI. T… New CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42863 2026-06-11 12:58 2026-06-9 Show GitHub Exploit DB Packet Storm
305 5.0 MEDIUM
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the tool update endpoint of FlowiseAI. The e… New CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42862 2026-06-11 12:56 2026-06-9 Show GitHub Exploit DB Packet Storm
306 9.6 CRITICAL
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint of FlowiseAI. T… New CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42861 2026-06-11 12:53 2026-06-9 Show GitHub Exploit DB Packet Storm
307 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New CWE-79
Cross-site Scripting
CVE-2026-45468 2026-06-11 11:43 2026-06-10 Show GitHub Exploit DB Packet Storm
308 9.1 CRITICAL
Network
- - No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. New CWE-229
 Improper Handling of Values
CVE-2026-45602 2026-06-11 07:16 2026-06-10 Show GitHub Exploit DB Packet Storm
309 7.5 HIGH
Network
- - Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security severity: High) New CWE-362
Race Condition
CVE-2026-1220 2026-06-11 07:16 2026-06-11 Show GitHub Exploit DB Packet Storm
310 4.3 MEDIUM
Network
buffalo open_xdmod OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request… Update CWE-284
NVD-CWE-noinfo
Improper Access Control
CVE-2026-45776 2026-06-11 06:07 2026-06-6 Show GitHub Exploit DB Packet Storm