Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3601 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-43294 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
3602 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-43295 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
3603 3.7
Network
Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい
CVE-2026-43514 2026-05-18 12:13 2026-05-12 Show GitHub Exploit DB Packet Storm
3604 7.5 重要
Network
- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-43652 2026-05-18 12:13 2026-05-11 Show GitHub Exploit DB Packet Storm
3605 7.5 重要
Network
アップル visionos
watchOS
iOS
tvOS
iPadOS
アップルのiPadOS等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい
CVE-2026-43654 2026-05-18 12:13 2026-05-11 Show GitHub Exploit DB Packet Storm
3606 10 緊急
Network
vm2 project vm2 vm2 projectのvm2におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-43997 2026-05-18 12:13 2026-05-13 Show GitHub Exploit DB Packet Storm
3607 8.5 重要
Network
vm2 project vm2 vm2 projectのvm2におけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-43998 2026-05-18 12:13 2026-05-13 Show GitHub Exploit DB Packet Storm
3608 9.9 緊急
Network
vm2 project vm2 vm2 projectのvm2における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-43999 2026-05-18 12:13 2026-05-13 Show GitHub Exploit DB Packet Storm
3609 7.2 重要
Network
vm2 project vm2 vm2 projectのvm2における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-44000 2026-05-18 12:13 2026-05-13 Show GitHub Exploit DB Packet Storm
3610 8.6 重要
Network
vm2 project vm2 vm2 projectのvm2におけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外
CVE-2026-44001 2026-05-18 12:13 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2521 7.8 HIGH
Local
bitdefender napoca The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kernel/handler.c. The handler uses a guest-controlled S… CWE-787
 Out-of-bounds Write
CVE-2026-10047 2026-06-9 00:17 2026-06-3 Show GitHub Exploit DB Packet Storm
2522 7.0 HIGH
Local
- - Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292 - CVE-2026-50265 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2523 7.5 HIGH
Network
- - bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service. CWE-125
Out-of-bounds Read
CVE-2026-38570 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2524 9.8 CRITICAL
Network
- - GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack. CWE-328
 Use of Weak Hash
CVE-2026-36182 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2525 4.6 MEDIUM
Physics
- - A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify system files and binaries for the duration of a boot sessi… - CVE-2026-36180 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2526 4.6 MEDIUM
Physics
- - GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial console. This issue allows physically-proximate attackers to obtai… CWE-256
Plaintext Storage of a Password 
CVE-2026-36174 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2527 9.8 CRITICAL
Network
- - T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account. CWE-259
Use of Hard-coded Password 
CVE-2026-35905 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2528 9.8 CRITICAL
Network
- - Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via … CWE-284
Improper Access Control
CVE-2026-35904 2026-06-9 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2529 8.4 HIGH
Local
- - clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-26422 2026-06-9 00:16 2026-06-7 Show GitHub Exploit DB Packet Storm
2530 3.5 LOW
Network
- - A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Handler. Executing a ma… CWE-74
CWE-80
Injection
Basic XSS
CVE-2026-11511 2026-06-9 00:16 2026-06-8 Show GitHub Exploit DB Packet Storm