Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193301 5.9 警告
Network
MEA Financial Enterprises, L.L.C. - iOS 用 Vision Bank アプリケーションにおけるサーバになりすまされる脆弱性 CWE-295
不正な証明書検証
CVE-2017-9559 2017-07-12 14:27 2017-06-12 Show GitHub Exploit DB Packet Storm
193302 5.9 警告
Network
Wawa Employees Credit Union - iOS 用 Wawa Employees Credit Union Mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-295
不正な証明書検証
CVE-2017-9558 2017-07-12 14:27 2017-06-12 Show GitHub Exploit DB Packet Storm
193303 6 警告
Local
シスコシステムズ - Cisco Network Convergence System 5500 シリーズルータ用 Cisco IOS XR ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-6666 2017-07-12 13:48 2017-06-7 Show GitHub Exploit DB Packet Storm
193304 9.8 緊急
Network
Red5 - Red5 Media Server の AMF unmarshaller における任意のコードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2017-5878 2017-07-11 18:07 2017-05-22 Show GitHub Exploit DB Packet Storm
193305 5.4 警告
Network
SAP - SAP SuccessFactors における格納型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-9613 2017-07-11 17:52 2017-06-15 Show GitHub Exploit DB Packet Storm
193306 6.1 警告
Network
Elasticsearch - Kibana におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-10366 2017-07-11 17:46 2016-10-24 Show GitHub Exploit DB Packet Storm
193307 6.1 警告
Network
Elasticsearch - Kibana におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2016-10365 2017-07-11 17:46 2016-11-15 Show GitHub Exploit DB Packet Storm
193308 6.1 警告
Network
Elasticsearch - Kibana におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000220 2017-07-11 17:46 2016-08-3 Show GitHub Exploit DB Packet Storm
193309 7.5 重要
Network
Elasticsearch - Kibana における認可に関する脆弱性 CWE-285
不適切な認可
CVE-2016-1000219 2017-07-11 17:46 2016-08-3 Show GitHub Exploit DB Packet Storm
193310 6.1 警告
Network
Elasticsearch - Kibana におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-9056 2017-07-11 17:46 2015-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2521 7.1 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox p… CWE-862
 Missing Authorization
CVE-2026-45001 2026-05-13 23:13 2026-05-12 Show GitHub Exploit DB Packet Storm
2522 5.0 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45000 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2523 5.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events. Attacke… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-44999 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2524 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a tool policy bypass vulnerability allowing bundled MCP and LSP tools to circumvent configured tool restrictions. Attackers with local agent access can append restr… CWE-863
 Incorrect Authorization
CVE-2026-44998 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2525 4.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit depth, child-count limits, contro… CWE-266
 Incorrect Privilege Assignment
CVE-2026-44997 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2526 3.7 LOW
Network
openclaw openclaw OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks. Attackers can influence ag… CWE-22
Path Traversal
CVE-2026-44996 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2527 7.3 HIGH
Local
openclaw openclaw OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Malicious workspace con… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-44995 2026-05-13 23:11 2026-05-12 Show GitHub Exploit DB Packet Storm
2528 5.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.22 contains an authentication bypass vulnerability in the Control UI bootstrap config endpoint that allows unauthenticated attackers to read sensitive configuration fields. Att… CWE-862
 Missing Authorization
CVE-2026-44994 2026-05-13 23:11 2026-05-12 Show GitHub Exploit DB Packet Storm
2529 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a message classification vulnerability in Feishu card-action callbacks that misclassifies direct messages as group conversations. Attackers can bypass dmPolicy enfo… CWE-184
 Incomplete Blacklist
CVE-2026-44993 2026-05-13 23:11 2026-05-12 Show GitHub Exploit DB Packet Storm
2530 5.0 MEDIUM
Local
openclaw openclaw OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST. Attackers can redirect credentialed MiniMax… CWE-441
Confused Deputy
CVE-2026-44992 2026-05-13 23:10 2026-05-12 Show GitHub Exploit DB Packet Storm