Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
121 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-53834 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
122 4.3 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-53835 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
123 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト
CVE-2026-53836 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
124 5.3 警告
Network
OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 New CWE-636
安全でない失敗処理
CVE-2026-53837 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
125 8.5 重要
Network
LiteSpeed Technologies LiteSpeed WHM Plugin (previously cPanel/WHM Plugin)
LiteSpeed cPanel Plugin
LiteSpeed TechnologiesのLiteSpeed cPanel Plugin等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性 New CWE-61
UNIX Symbolic Link のフォロー
CVE-2026-54420 2026-06-16 13:35 2026-06-14 Show GitHub Exploit DB Packet Storm
126 7.5 重要
Network
vLLM vLLM vLLMにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-5497 2026-06-16 13:35 2026-06-11 Show GitHub Exploit DB Packet Storm
127 5.5 警告
Local
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
ログファイルからの情報漏えい
CVE-2026-9735 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
128 7.5 重要
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御
CVE-2026-9740 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
129 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-9743 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
130 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 New CWE-617
到達可能なアサーション
CVE-2026-9747 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354981 - cofax cofax Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. NVD-CWE-Other
CVE-2005-4385 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
354982 - contenite contenite Cross-site scripting (XSS) vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NVD-CWE-Other
CVE-2005-4387 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
354983 - formicary_ltd. epix Cross-site scripting (XSS) vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search query parameters. NVD-CWE-Other
CVE-2005-4394 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
354984 - farcry farcry Cross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the criteria parameter. NVD-CWE-Other
CVE-2005-4395 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
354985 - random_mouse_software red_queen redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid (1) yellowpage_id, (2) skin_id, (3) supplier_id, and (4) module parameters, which leaks t… NVD-CWE-Other
CVE-2005-4405 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
354986 - esselbach_internet_solutions esselbach_storyteller_cms Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Se… NVD-CWE-Other
CVE-2005-4433 2011-03-8 11:28 2005-12-21 Show GitHub Exploit DB Packet Storm
354987 - - - Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a SYN packet for a TCP stream, which requires an RST packet i… NVD-CWE-Other
CVE-2005-4464 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
354988 - nec univerge The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a denial of service and possibly execute arbitrary code via craf… NVD-CWE-Other
CVE-2005-4465 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
354989 - avaya modular_messaging_message_storage_server POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets. NVD-CWE-Other
CVE-2005-4471 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
354990 - macromedia jrun Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly … NVD-CWE-Other
CVE-2005-4472 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm