Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1361 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43475 2026-05-25 10:20 2026-05-8 Show GitHub Exploit DB Packet Storm
1362 4.8 警告
Network 		Samba Project rsync Samba Projectのrsyncにおける代替名による認証回避に関する脆弱性 CWE-289
代替名による認証回避 		CVE-2026-43617 2026-05-25 10:20 2026-05-20 Show GitHub Exploit DB Packet Storm
1363 8.1 重要
Network 		Samba Project rsync Samba Projectのrsyncにおける複数の脆弱性 CWE-125
CWE-190
CVE-2026-43618 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
1364 6.3 警告
Local 		Samba Project rsync Samba Projectのrsyncにおける複数の脆弱性 CWE-367
CWE-59
CVE-2026-43619 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
1365 5.5 警告
Local 		Samba Project rsync Samba Projectのrsyncにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43620 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
1366 8.1 重要
Network 		GoHugo Hugo GoHugoのHugoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-44301 2026-05-25 10:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1367 9.8 緊急
Network 		lightningai pytorch lightning Lightning AIのPyTorch Lightningにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード 		CVE-2026-44484 2026-05-25 10:19 2026-05-14 Show GitHub Exploit DB Packet Storm
1368 3.7 低
Network 		Samba Project rsync Samba Projectのrsyncにおける境界条件の判定に関する脆弱性 CWE-193
境界条件の判定 		CVE-2026-45232 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
1369 7.8 重要
Local 		FreeBSD FreeBSD FreeBSDにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-45250 2026-05-25 10:19 2026-05-21 Show GitHub Exploit DB Packet Storm
1370 7.8 重要
Local 		FreeBSD FreeBSD FreeBSDにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-45251 2026-05-25 10:19 2026-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 - - - Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cache. This allows for path traversal by having a module name … New CWE-22
Path Traversal 		CVE-2026-49233 2026-06-9 00:16 2026-06-9 Show GitHub Exploit DB Packet Storm
232 - - - Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such as running out of file descriptors. This condition can be triggered maliciously … New CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2026-49232 2026-06-9 00:16 2026-06-9 Show GitHub Exploit DB Packet Storm
233 - - - Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching Prot… New CWE-841
 Improper Enforcement of Behavioral Workflow 		CVE-2026-43974 2026-06-9 00:16 2026-06-9 Show GitHub Exploit DB Packet Storm
234 - - - Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gun_http:handle/5,… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-43973 2026-06-9 00:16 2026-06-9 Show GitHub Exploit DB Packet Storm
235 - - - Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2 PUSH_PROMISE authority. In gun_http2:push_promise_frame/7, the :… New CWE-346
 Origin Validation Error 		CVE-2026-43972 2026-06-9 00:16 2026-06-9 Show GitHub Exploit DB Packet Storm
236 7.5 HIGH
Network 		- - bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service. Update CWE-125
Out-of-bounds Read 		CVE-2026-38570 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
237 - - - Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. These vulne… New - CVE-2026-36789 2026-06-9 00:16 2026-06-9 Show GitHub Exploit DB Packet Storm
238 9.8 CRITICAL
Network 		- - GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack. Update CWE-328
 Use of Weak Hash 		CVE-2026-36182 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
239 4.6 MEDIUM
Physics 		- - A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify system files and binaries for the duration of a boot sessi… Update - CVE-2026-36180 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
240 4.6 MEDIUM
Physics 		- - GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial console. This issue allows physically-proximate attackers to obtai… Update CWE-256
Plaintext Storage of a Password  		CVE-2026-36174 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm