Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5101	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-23389	2026-04-27 10:53	2026-03-25	Show	GitHub Exploit DB Packet Storm

5102	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-23390	2026-04-27 10:53	2026-03-25	Show	GitHub Exploit DB Packet Storm

5103	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23391	2026-04-27 10:53	2026-03-25	Show	GitHub Exploit DB Packet Storm

5104	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23392	2026-04-27 10:53	2026-03-25	Show	GitHub Exploit DB Packet Storm

5105	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-23393	2026-04-27 10:53	2026-03-25	Show	GitHub Exploit DB Packet Storm

5106	4.7	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-23394	2026-04-27 10:53	2026-03-25	Show	GitHub Exploit DB Packet Storm

5107	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23395	2026-04-27 10:53	2026-03-25	Show	GitHub Exploit DB Packet Storm

5108	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-23396	2026-04-27 10:53	2026-03-26	Show	GitHub Exploit DB Packet Storm

5109	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-23397	2026-04-27 10:53	2026-03-26	Show	GitHub Exploit DB Packet Storm

5110	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-23398	2026-04-27 10:53	2026-03-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
821	-		-	-	Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network range… New	CWE-674 CWE-1287 Uncontrolled Recursion Improper Validation of Specified Type of Input	CVE-2026-49941	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

822	-		-	-	Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj… New	CWE-93 CRLF Injection	CVE-2026-46741	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

823	-		-	-	Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional st… New	CWE-93 CRLF Injection	CVE-2026-46739	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

824	5.3	MEDIUM Network	-	-	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log … New	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-41178	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

825	7.1	HIGH Physics	-	-	GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active toke… New	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-36176	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

826	6.8	MEDIUM Physics	-	-	An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted str… New	CWE-20 CWE-288 Improper Input Validation Authentication Bypass Using an Alternate Path or Channel	CVE-2026-36175	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

827	9.1	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing. Update	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8644	2026-06-5 01:58	2026-06-2	Show	GitHub Exploit DB Packet Storm

828	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security. Update	CWE-502 Deserialization of Untrusted Data	CVE-2026-9319	2026-06-5 01:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

829	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls. Update	CWE-94 Code Injection	CVE-2026-9311	2026-06-5 01:53	2026-06-2	Show	GitHub Exploit DB Packet Storm

830	8.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This could result in remo… Update	CWE-502 Deserialization of Untrusted Data	CVE-2026-9330	2026-06-5 01:52	2026-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed