Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203471 6.1 警告
Network
オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における Console に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0675 2016-04-26 14:05 2016-04-19 Show GitHub Exploit DB Packet Storm
203472 3.7
Network
オラクル - Oracle Fusion Middleware の Oracle HTTP Server における OSSL Module に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0671 2016-04-26 14:05 2016-04-19 Show GitHub Exploit DB Packet Storm
203473 9.8 緊急
Network
オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における Java Messaging Service に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0638 2016-04-26 14:05 2016-04-19 Show GitHub Exploit DB Packet Storm
203474 6.1 警告
Network
オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Analytics Scorecard に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0479 2016-04-26 14:05 2016-04-19 Show GitHub Exploit DB Packet Storm
203475 5.4 警告
Network
オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Analytics Web General に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0468 2016-04-26 14:05 2016-04-19 Show GitHub Exploit DB Packet Storm
203476 5.4 警告
Network
オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM における ePerformance に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3460 2016-04-26 12:15 2016-04-19 Show GitHub Exploit DB Packet Storm
203477 4.6 警告
Network
オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM ePerformance における Security に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3457 2016-04-26 12:15 2016-04-19 Show GitHub Exploit DB Packet Storm
203478 5.4 警告
Network
オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Portal に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3442 2016-04-26 12:15 2016-04-19 Show GitHub Exploit DB Packet Storm
203479 4.7 警告
Network
オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における PIA Core Technology に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3435 2016-04-26 12:15 2016-04-19 Show GitHub Exploit DB Packet Storm
203480 5.4 警告
Network
オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Rich Text Editor に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3423 2016-04-26 12:15 2016-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 5.3 MEDIUM
Network
- - OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction. Attackers can render externally inf… New CWE-863
 Incorrect Authorization
CVE-2026-45002 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
622 5.0 MEDIUM
Local
- - OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access can redirect runtime… New CWE-441
Confused Deputy
CVE-2026-45003 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
623 7.8 HIGH
Local
- - OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during provider setup metadata resolution.… New CWE-427
 Uncontrolled Search Path Element
CVE-2026-45004 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
624 6.0 MEDIUM
Network
- - OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and reload. Attackers with previously valid webhook r… New CWE-672
 Operation on a Resource after Expiration or Release
CVE-2026-45005 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
625 8.8 HIGH
Network
- - OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows compromised models to write unsafe configuration… New CWE-184
 Incomplete Blacklist
CVE-2026-45006 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
626 - - - `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this… New CWE-331
 Insufficient Entropy
CVE-2026-7210 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
627 7.5 HIGH
Network
- - Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users. New - CVE-2026-41712 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
628 8.2 HIGH
Network
- - A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input ma… New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-41713 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
629 - - - The affected applications contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process. (ZD… New CWE-122
Heap-based Buffer Overflow
CVE-2025-12659 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm
630 - - - Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3. New - CVE-2026-8388 2026-05-12 23:20 2026-05-12 Show GitHub Exploit DB Packet Storm