Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196611 5.4 警告
Network
IBM - IBM Jazz Foundation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6054 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
196612 5.4 警告
Network
IBM - IBM Jazz Reporting Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6047 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
196613 5.4 警告
Network
IBM - IBM Jazz Reporting Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5899 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
196614 4.3 警告
Network
IBM - IBM Jazz Reporting Service における重要な情報を取得される脆弱性 CWE-254
セキュリティ機能
CVE-2016-5898 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
196615 8.1 重要
Network
IBM - IBM BigFix Platform におけるコマンドを挿入される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-0396 2017-02-15 16:30 2016-11-7 Show GitHub Exploit DB Packet Storm
196616 7.8 重要
Local
IBM - IBM AIX の bellmail バイナリにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-1093 2017-02-15 16:28 2017-01-29 Show GitHub Exploit DB Packet Storm
196617 5.3 警告
Network
IBM - IBM Security Key Lifecycle Manager における重要な情報を公開される脆弱性 CWE-200
情報漏えい
CVE-2016-6117 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
196618 5.9 警告
Network
IBM - IBM Security Key Lifecycle Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-6116 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
196619 8.2 重要
Network
IBM - IBM Security Key Lifecycle Manager における保護された領域にアクセスされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-6105 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
196620 8.8 重要
Network
IBM - IBM Security Key Lifecycle Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-6103 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 9.1 CRITICAL
Network
openclaw openclaw OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection misses local background async exec completion events. Attackers can… New CWE-184
 Incomplete Blacklist
CVE-2026-43578 2026-05-8 02:04 2026-05-7 Show GitHub Exploit DB Packet Storm
52 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.9 contains a file read vulnerability allowing attackers to bypass navigation guards through browser act/evaluate interactions. Attackers can pivot into the local CDP origin and… New CWE-862
 Missing Authorization
CVE-2026-43577 2026-05-8 02:04 2026-05-7 Show GitHub Exploit DB Packet Storm
53 7.7 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted second-hop targets. The webSocket… New CWE-601
CWE-918
Open Redirect
Server-Side Request Forgery (SSRF) 
CVE-2026-43576 2026-05-8 02:04 2026-05-7 Show GitHub Exploit DB Packet Storm
54 9.8 CRITICAL
Network
openclaw openclaw OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session credentials. Attackers can acces… New CWE-862
 Missing Authorization
CVE-2026-43575 2026-05-8 02:03 2026-05-7 Show GitHub Exploit DB Packet Storm
55 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers … New CWE-183
 Permissive List of Allowed Inputs
CVE-2026-43574 2026-05-8 02:03 2026-05-5 Show GitHub Exploit DB Packet Storm
56 7.7 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact wi… New CWE-862
CWE-918
 Missing Authorization
Server-Side Request Forgery (SSRF) 
CVE-2026-43573 2026-05-8 02:03 2026-05-5 Show GitHub Exploit DB Packet Storm
57 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix net_device lifecycle with device_move The net_device is allocated during function instance creation an… Update NVD-CWE-noinfo
CVE-2026-31723 2026-05-8 02:03 2026-05-2 Show GitHub Exploit DB Packet Storm
58 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix net_device lifecycle with device_move The net_device is allocated during function instance creation and r… Update NVD-CWE-noinfo
CVE-2026-31724 2026-05-8 02:00 2026-05-2 Show GitHub Exploit DB Packet Storm
59 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ecm: Fix net_device lifecycle with device_move The net_device is allocated during function instance creation and r… Update NVD-CWE-noinfo
CVE-2026-31725 2026-05-8 01:58 2026-05-2 Show GitHub Exploit DB Packet Storm
60 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled If the gmac0 is disabled, the precheck for a valid ingress device… Update CWE-476
 NULL Pointer Dereference
CVE-2026-31736 2026-05-8 01:53 2026-05-2 Show GitHub Exploit DB Packet Storm