Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201831 5.3 警告
Network 		Ecava - Ecava IntegraXor における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-2302 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
201832 6.3 警告
Network 		Ecava - Ecava IntegraXor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-2301 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
201833 6.5 警告
Network 		Ecava - Ecava IntegraXor における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2016-2300 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
201834 7.3 重要
Network 		Ecava - Ecava IntegraXor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-2299 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
201835 7.5 重要
Network 		シスコシステムズ - Cisco IOS および IOS XE の NTP の実装におけるシステム時刻を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-1384 2016-04-28 16:20 2016-04-19 Show GitHub Exploit DB Packet Storm
201836 7.5 重要
Network 		シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの DHCPv6 リレーの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1367 2016-04-28 16:20 2016-04-20 Show GitHub Exploit DB Packet Storm
201837 7.5 重要
Network 		シスコシステムズ - Cisco Wireless LAN Controller ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1364 2016-04-28 16:20 2016-04-20 Show GitHub Exploit DB Packet Storm
201838 9.8 緊急
Network 		シスコシステムズ - Cisco Wireless LAN Controller ソフトウェアのリダイレクト機能におけるバッファオーバーフローの脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1363 2016-04-28 16:20 2016-04-20 Show GitHub Exploit DB Packet Storm
201839 9.8 緊急
Network 		- HPE Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2016-2008 2016-04-28 16:03 2016-04-18 Show GitHub Exploit DB Packet Storm
201840 9.8 緊急
Network 		- HPE Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2016-2007 2016-04-28 16:03 2016-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
721 7.7 HIGH
Network 		- - OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the final browser target after navigatio… New CWE-862
 Missing Authorization 		CVE-2026-42436 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
722 8.8 HIGH
Network 		- - OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to inject environment variable assignments at the argv level. Attack… New CWE-184
 Incomplete Blacklist 		CVE-2026-42435 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
723 8.8 HIGH
Network 		- - OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass sandbox boundaries … New CWE-863
 Incorrect Authorization 		CVE-2026-42434 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
724 6.5 MEDIUM
Network 		- - OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can… New CWE-862
 Missing Authorization 		CVE-2026-42433 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
725 6.1 MEDIUM
Network 		- - AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Att… New CWE-79
Cross-site Scripting 		CVE-2023-54349 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
726 8.8 HIGH
Network 		- - ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to execute arbitrary code by injecting formula payloads into vendor name fields. Attackers can add malicious … New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2023-54348 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
727 7.5 HIGH
Network 		- - OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers c… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2023-54347 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
728 7.5 HIGH
Network 		- - WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file path… New CWE-538
 File and Directory Information Exposure 		CVE-2023-54346 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
729 8.8 HIGH
Network 		- - Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame intr… New CWE-94
Code Injection 		CVE-2023-54345 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
730 9.8 CRITICAL
Network 		- - Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interface.… New CWE-306
Missing Authentication for Critical Function 		CVE-2023-54344 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm