Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198801 4.6 警告
Physics
Linux
SUSE
Canonical
- Linux Kernel の drivers/input/misc/powermate.c の powermate_probe 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2186 2016-10-27 18:07 2016-04-12 Show GitHub Exploit DB Packet Storm
198802 4.6 警告
Physics
Linux
SUSE
Canonical
- Linux Kernel の snd-usb-audio ドライバの sound/usb/quirks.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2184 2016-10-27 18:07 2016-04-12 Show GitHub Exploit DB Packet Storm
198803 4.6 警告
Physics
Linux
SUSE
Canonical
- Linux Kernel の drivers/input/misc/ati_remote2.c の ati_remote2_probe 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2185 2016-10-27 18:07 2016-04-12 Show GitHub Exploit DB Packet Storm
198804 6.8 警告 Debian
Google
- Google Chrome の PDFium で使用される OpenJPEG の pi.c における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1628 2016-10-27 18:07 2016-02-9 Show GitHub Exploit DB Packet Storm
198805 8.1 重要
Network
アップル
ソフォス
ヒューレット・パッカード・エンタープライズ
オラクル
OpenBSD
- OpenSSH のクライアントの roaming_common.c の roaming_read および roaming_write 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-0778 2016-10-27 18:07 2016-01-14 Show GitHub Exploit DB Packet Storm
198806 6.5 警告
Network
アップル
ソフォス
ヒューレット・パッカード・エンタープライズ
オラクル
OpenBSD
- OpenSSH のクライアントの roaming_common.c の resend_bytes 関数におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0777 2016-10-27 18:07 2016-01-14 Show GitHub Exploit DB Packet Storm
198807 4 警告 レッドハット
openSUSE project
Canonical
オラクル
- Oracle MySQL の MySQL Server における Server: Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0611 2016-10-27 17:53 2016-01-19 Show GitHub Exploit DB Packet Storm
198808 3.5 注意 openSUSE project
Canonical
Debian
MariaDB Corporation Ab.
オラクル
レッドハット
- Oracle MySQL の MySQL Server および MariaDB における InnoDB に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0610 2016-10-27 17:53 2016-01-19 Show GitHub Exploit DB Packet Storm
198809 2.8 注意 レッドハット
openSUSE project
Canonical
オラクル
- Oracle MySQL の MySQL Server における Server: Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0607 2016-10-27 17:53 2016-01-19 Show GitHub Exploit DB Packet Storm
198810 4 警告 レッドハット
openSUSE project
Canonical
オラクル
- Oracle MySQL の MySQL Server における Server: DML に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0595 2016-10-27 17:53 2016-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1131 7.1 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Talk Voice configuration persistence. Attackers w… CWE-863
 Incorrect Authorization
CVE-2026-41379 2026-05-2 00:51 2026-04-29 Show GitHub Exploit DB Packet Storm
1132 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted gateway-side tool access. Attacker… CWE-862
 Missing Authorization
CVE-2026-41378 2026-05-2 00:51 2026-04-29 Show GitHub Exploit DB Packet Storm
1133 4.6 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install unt… CWE-636
 Not Failing Securely ('Failing Open')
CVE-2026-41377 2026-05-2 00:50 2026-04-29 Show GitHub Exploit DB Packet Storm
1134 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can fetch thread-root … CWE-346
 Origin Validation Error
CVE-2026-41376 2026-05-2 00:50 2026-04-29 Show GitHub Exploit DB Packet Storm
1135 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints that fails to properly enforce operator.admin scope checks for external channels… CWE-863
 Incorrect Authorization
CVE-2026-41375 2026-05-2 00:47 2026-04-29 Show GitHub Exploit DB Packet Storm
1136 6.1 MEDIUM
Local
openclaw openclaw OpenClaw before 2026.3.31 contains an incomplete host-env-security-policy.json that fails to restrict compiler binary environment variables, allowing untrusted models to substitute CC, CXX, CARGO_BUI… CWE-427
 Uncontrolled Search Path Element
CVE-2026-41373 2026-05-2 00:46 2026-04-29 Show GitHub Exploit DB Packet Storm
1137 - - - JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This occurs in grid2deg in APR… CWE-121
Stack-based Buffer Overflow
CVE-2026-42996 2026-05-2 00:37 2026-05-1 Show GitHub Exploit DB Packet Storm
1138 4.8 MEDIUM
Network
- - In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data process… CWE-909
 Missing Initialization of Resource
CVE-2026-40687 2026-05-2 00:33 2026-05-1 Show GitHub Exploit DB Packet Storm
1139 7.5 HIGH
Network
- - Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/:chart_id/query with… CWE-862
 Missing Authorization
CVE-2026-40601 2026-05-2 00:31 2026-05-1 Show GitHub Exploit DB Packet Storm
1140 6.5 MEDIUM
Network
- - Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited does not validate any … CWE-306
Missing Authentication for Critical Function
CVE-2026-35514 2026-05-2 00:31 2026-05-1 Show GitHub Exploit DB Packet Storm