Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
121 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-53834 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
122 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-53835 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
123 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト 		CVE-2026-53836 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
124 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 New CWE-636
安全でない失敗処理 		CVE-2026-53837 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
125 8.5 重要
Network 		LiteSpeed Technologies LiteSpeed WHM Plugin (previously cPanel/WHM Plugin)
LiteSpeed cPanel Plugin 		LiteSpeed TechnologiesのLiteSpeed cPanel Plugin等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性 New CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-54420 2026-06-16 13:35 2026-06-14 Show GitHub Exploit DB Packet Storm
126 7.5 重要
Network 		vLLM vLLM vLLMにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-5497 2026-06-16 13:35 2026-06-11 Show GitHub Exploit DB Packet Storm
127 5.5 警告
Local 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
ログファイルからの情報漏えい 		CVE-2026-9735 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
128 7.5 重要
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-9740 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
129 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-9743 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
130 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 New CWE-617
到達可能なアサーション 		CVE-2026-9747 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354761 - eric_fichot downfile DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3) add_form.php. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2005-2819 2011-05-19 13:00 2005-09-8 Show GitHub Exploit DB Packet Storm
354762 - realnetworks realone_player
realplayer 		Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2005-2936 2011-05-19 13:00 2005-11-18 Show GitHub Exploit DB Packet Storm
354763 - horde horde Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages". CWE-79
Cross-site Scripting 		CVE-2005-3570 2011-05-19 13:00 2005-11-16 Show GitHub Exploit DB Packet Storm
354764 - sun java_communications_services_delegated_administrator Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (… NVD-CWE-noinfo
CVE-2005-4045 2011-05-19 13:00 2005-12-7 Show GitHub Exploit DB Packet Storm
354765 - suse opensuse
suse_linux 		SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0230 2011-04-28 13:00 2010-01-23 Show GitHub Exploit DB Packet Storm
354766 - tor tor Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for… CWE-200
Information Exposure 		CVE-2010-0384 2011-04-27 13:00 2010-01-26 Show GitHub Exploit DB Packet Storm
354767 - fetchmail fetchmail The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (applic… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0562 2011-04-27 13:00 2010-02-9 Show GitHub Exploit DB Packet Storm
354768 - apple mac_os_x
mac_os_x_server 		Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly … NVD-CWE-noinfo
CVE-2006-3497 2011-04-7 13:00 2006-08-3 Show GitHub Exploit DB Packet Storm
354769 - ibm webi Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecifi… CWE-79
Cross-site Scripting 		CVE-2010-1242 2011-04-7 12:18 2010-04-6 Show GitHub Exploit DB Packet Storm
354770 - ibm webi The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors. NVD-CWE-noinfo
CVE-2010-1243 2011-04-7 12:18 2010-04-6 Show GitHub Exploit DB Packet Storm