Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5111	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-23399	2026-04-27 10:53	2026-03-28	Show	GitHub Exploit DB Packet Storm

5112	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-23400	2026-04-27 10:53	2026-03-29	Show	GitHub Exploit DB Packet Storm

5113	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23401	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

5114	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23402	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

5115	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-23403	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

5116	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23404	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

5117	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23405	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

5118	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-23406	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

5119	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-23407	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

5120	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-23408	2026-04-27 10:53	2026-04-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
821	-		-	-	Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network range… New	CWE-674 CWE-1287 Uncontrolled Recursion Improper Validation of Specified Type of Input	CVE-2026-49941	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

822	-		-	-	Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj… New	CWE-93 CRLF Injection	CVE-2026-46741	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

823	-		-	-	Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional st… New	CWE-93 CRLF Injection	CVE-2026-46739	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

824	5.3	MEDIUM Network	-	-	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log … New	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-41178	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

825	7.1	HIGH Physics	-	-	GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active toke… New	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-36176	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

826	6.8	MEDIUM Physics	-	-	An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted str… New	CWE-20 CWE-288 Improper Input Validation Authentication Bypass Using an Alternate Path or Channel	CVE-2026-36175	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

827	9.1	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing. Update	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8644	2026-06-5 01:58	2026-06-2	Show	GitHub Exploit DB Packet Storm

828	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security. Update	CWE-502 Deserialization of Untrusted Data	CVE-2026-9319	2026-06-5 01:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

829	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls. Update	CWE-94 Code Injection	CVE-2026-9311	2026-06-5 01:53	2026-06-2	Show	GitHub Exploit DB Packet Storm

830	8.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This could result in remo… Update	CWE-502 Deserialization of Untrusted Data	CVE-2026-9330	2026-06-5 01:52	2026-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed