Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
133271 8.8 重要
Adjacent
Open5GS Open5GS Open5GS におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2021-25863 2021-10-11 16:19 2021-01-15 Show GitHub Exploit DB Packet Storm
133272 8.8 重要
Network
Apache Software Foundation Apache Hadoop Apache Hadoop における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2020-9492 2021-10-11 16:19 2020-03-1 Show GitHub Exploit DB Packet Storm
133273 4.9 警告
Network
Robert Bosch GmbH FSM-5000 ファームウェア
FSM-2500 ファームウェア
Bosch FSM-2500 サーバおよび Bosch FSM-5000 サーバにおける強度が不十分なパスワードハッシュの使用に関する脆弱性 CWE-916
強度が不十分なパスワードハッシュの使用
CVE-2020-6780 2021-10-11 16:19 2020-01-10 Show GitHub Exploit DB Packet Storm
133274 10 緊急
Network
Robert Bosch GmbH FSM-5000 ファームウェア
FSM-2500 ファームウェア
Bosch FSM-2500 サーバおよび Bosch FSM-5000 サーバにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2020-6779 2021-10-11 16:19 2020-01-10 Show GitHub Exploit DB Packet Storm
133275 7.8 重要
Local
シスコシステムズ Cisco SD-WAN vManage
Cisco SD-WAN ファームウェア
Cisco SD-WAN vBond Orchestrator
Cisco SD-WAN vSmart Controller ファームウェア
複数の Cisco SD-WAN 製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2021-1263 2021-10-11 16:14 2021-01-20 Show GitHub Exploit DB Packet Storm
133276 8.8 重要
Network
シスコシステムズ Cisco SD-WAN vManage Cisco SD-WAN vManage ソフトウェアにおける脆弱性 CWE-noinfo
情報不足
CVE-2021-1302 2021-10-11 16:05 2021-01-20 Show GitHub Exploit DB Packet Storm
133277 6 警告
Network
VMware Spring Cloud Task Spring Cloud Task における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2020-5428 2021-10-11 15:30 2020-11-3 Show GitHub Exploit DB Packet Storm
133278 5.5 警告
Local
Fedora Project
JasPer Project
JasPer
Fedora
JasPer における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2021-3272 2021-10-11 15:30 2021-01-6 Show GitHub Exploit DB Packet Storm
133279 7.5 重要
Network
Winmail Winmail Winmail におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2020-23776 2021-10-11 15:30 2020-06-30 Show GitHub Exploit DB Packet Storm
133280 5.4 警告
Network
TIBCO Software TIBCO BPM Enterprise
TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric
TIBCO Software Inc. の TIBCO BPM Enterprise および TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2021-23272 2021-10-11 15:30 2021-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 7.8 HIGH
Local
- - Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally. New CWE-284
Improper Access Control
CVE-2026-42829 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
322 7.8 HIGH
Local
- - Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. New CWE-126
 Buffer Over-read
CVE-2026-42828 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
323 - - - Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out of bounds read can happen. Imp… New CWE-125
Out-of-bounds Read
CVE-2026-42771 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
324 - - - Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which present… New CWE-325
 Missing Required Cryptographic Step
CVE-2026-42770 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
325 - - - Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certificate validation inef… New CWE-295
Improper Certificate Validation 
CVE-2026-42769 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
326 - - - Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/… New CWE-514
CVE-2026-42768 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
327 - - - Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference ca… New CWE-476
 NULL Pointer Dereference
CVE-2026-42767 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
328 - - - Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application … New CWE-476
 NULL Pointer Dereference
CVE-2026-42766 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
329 - - - Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a … New CWE-476
 NULL Pointer Dereference
CVE-2026-42765 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
330 - - - Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer … New CWE-476
 NULL Pointer Dereference
CVE-2026-42764 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm