Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6051 8.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおける複数の脆弱性 CWE-121
CWE-170
CVE-2026-34464 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
6052 7 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-34596 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
6053 6.5 警告
Network 		Django Software Foundation Django Django Software FoundationのDjangoにおける重要情報を含む永続 Cookie の使用に関する脆弱性 CWE-539
重要情報を含む永続 Cookie の使用 		CVE-2026-35192 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
6054 5 警告
Network 		Linux Containers Incus Linux ContainersのIncusにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35527 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
6055 4.8 警告
Network 		Broadcom symantec siteminder Broadcomのsymantec siteminderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-3862 2026-05-11 10:58 2026-03-10 Show GitHub Exploit DB Packet Storm
6056 2.7 低
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
CWE-noinfo
CVE-2026-3911 2026-05-11 10:58 2026-03-11 Show GitHub Exploit DB Packet Storm
6057 6.5 警告
Network 		Linux Containers Incus Linux ContainersのIncusにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-40195 2026-05-11 10:58 2026-05-6 Show GitHub Exploit DB Packet Storm
6058 6.5 警告
Network 		Linux Containers Incus Linux ContainersのIncusにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-40197 2026-05-11 10:58 2026-05-6 Show GitHub Exploit DB Packet Storm
6059 6.5 警告
Network 		Linux Containers Incus Linux ContainersのIncusにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-40251 2026-05-11 10:58 2026-05-6 Show GitHub Exploit DB Packet Storm
6060 7.2 重要
Network 		NocoBase NocoBase NocoBaseにおける複数の脆弱性 CWE-284
CWE-89
CVE-2026-41641 2026-05-11 10:58 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 5.3 MEDIUM
Network 		wolfssl wolfssl Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS n… New CWE-295
Improper Certificate Validation  		CVE-2026-10592 2026-06-27 03:55 2026-06-26 Show GitHub Exploit DB Packet Storm
12 7.5 HIGH
Network 		wolfssl wolfssl X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra (OPENSSL_EXTRA) and whose application vali… New CWE-295
Improper Certificate Validation  		CVE-2026-11310 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
13 7.5 HIGH
Network 		microsoft cost_management Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network. New CWE-200
Information Exposure 		CVE-2026-47633 2026-06-27 03:54 2026-06-19 Show GitHub Exploit DB Packet Storm
14 7.5 HIGH
Network 		wolfssl wolfssl Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of … New CWE-125
Out-of-bounds Read 		CVE-2026-12340 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
15 7.5 HIGH
Network 		wolfssl wolfssl Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but fails to return, so ex… New CWE-393
CWE-787
 Return of Wrong Status Code
 Out-of-bounds Write 		CVE-2026-55958 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
16 7.5 HIGH
Network 		wolfssl wolfssl Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation. A raw public key has no chain, so ParseCertRelative() accepts it without performing any … New CWE-295
Improper Certificate Validation  		CVE-2026-55960 2026-06-27 03:54 2026-06-26 Show GitHub Exploit DB Packet Storm
17 5.3 MEDIUM
Network 		wolfssl wolfssl Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have the keyCertSign key usage when a Key Usage extension is present, but chain-s… New CWE-295
Improper Certificate Validation  		CVE-2026-55964 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm
18 5.5 MEDIUM
Local 		jqlang jq jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is … New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-54679 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm
19 7.1 HIGH
Local 		jqlang jq jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds… New CWE-787
 Out-of-bounds Write 		CVE-2026-49839 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm
20 5.5 MEDIUM
Local 		jqlang jq jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface, resulting in deni… New CWE-674
 Uncontrolled Recursion 		CVE-2026-47770 2026-06-27 03:53 2026-06-26 Show GitHub Exploit DB Packet Storm