Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202761 5.9 警告
Network
ジュニパーネットワークス - Juniper QFX5100 および QFX10002 スイッチ上で稼動する Junos OS における暗号および認証保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2016-1273 2016-04-22 16:59 2016-04-13 Show GitHub Exploit DB Packet Storm
202762 7.8 重要
Local
ジュニパーネットワークス - Juniper Junos OS における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1271 2016-04-22 16:59 2016-04-13 Show GitHub Exploit DB Packet Storm
202763 7.5 重要
Network
ジュニパーネットワークス - Juniper Junos OS の rpd デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1270 2016-04-22 16:59 2016-04-13 Show GitHub Exploit DB Packet Storm
202764 7.5 重要
Network
ジュニパーネットワークス - Juniper Junos OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1269 2016-04-22 16:59 2016-04-13 Show GitHub Exploit DB Packet Storm
202765 6.7 警告
Local
ジュニパーネットワークス - Juniper Junos OS の RPC 機能における任意のファイルを読まれる脆弱性 CWE-362
競合状態
CVE-2016-1267 2016-04-22 16:59 2016-04-13 Show GitHub Exploit DB Packet Storm
202766 8.8 重要
Network
ジュニパーネットワークス - Juniper Junos OS の Op コマンドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1264 2016-04-22 16:59 2016-04-13 Show GitHub Exploit DB Packet Storm
202767 8.8 重要
Network
TIBCO Software - TIBCO Enterprise Message Service および EMS Appliance のサーバの tibemsd におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3628 2016-04-22 16:58 2016-04-19 Show GitHub Exploit DB Packet Storm
202768 5.4 警告
Network
Ipswitch, Inc. - Ipswitch MOVEit File Transfer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-7676 2016-04-22 16:56 2015-10-2 Show GitHub Exploit DB Packet Storm
202769 9.8 緊急
Network
DELL EMC (旧 EMC Corporation) - VMAX 仮想アプライアンス用 EMC Unisphere の vApp Manager の HTTP サーブレットにおける任意のファイルに書き込まれる脆弱性 CWE-20
不適切な入力確認
CVE-2016-0889 2016-04-22 15:34 2016-04-14 Show GitHub Exploit DB Packet Storm
202770 7.3 重要
Network
SAP - SAP HANA の Data Provisioning Agent における重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2016-4018 2016-04-22 14:26 2016-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
951 5.3 MEDIUM
Network
torproject tor Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. New CWE-669
 Incorrect Resource Transfer Between Spheres
CVE-2026-44599 2026-05-8 02:31 2026-05-7 Show GitHub Exploit DB Packet Storm
952 5.3 MEDIUM
Network
torproject tor Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010. New CWE-696
 Incorrect Behavior Order
CVE-2026-44600 2026-05-8 02:26 2026-05-7 Show GitHub Exploit DB Packet Storm
953 9.1 CRITICAL
Network
torproject tor Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007. New CWE-193
 Off-by-one Error
CVE-2026-44603 2026-05-8 02:24 2026-05-7 Show GitHub Exploit DB Packet Storm
954 8.8 HIGH
Local
- - NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container … Update CWE-22
Path Traversal
CVE-2026-7875 2026-05-8 02:15 2026-05-7 Show GitHub Exploit DB Packet Storm
955 7.5 HIGH
Network
- - Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head… Update CWE-444
HTTP Request Smuggling
CVE-2026-40562 2026-05-8 02:15 2026-05-6 Show GitHub Exploit DB Packet Storm
956 5.3 MEDIUM
Network
kazuho starlet Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head… Update CWE-444
HTTP Request Smuggling
CVE-2026-40561 2026-05-8 02:15 2026-05-3 Show GitHub Exploit DB Packet Storm
957 6.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exp… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-44113 2026-05-8 02:08 2026-05-7 Show GitHub Exploit DB Packet Storm
958 7.8 HIGH
Local
openclaw openclaw OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious… New CWE-184
 Incomplete Blacklist
CVE-2026-44114 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
959 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell ex… New CWE-184
 Incomplete Blacklist
CVE-2026-44115 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
960 8.6 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44116 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm