Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207641 3.2 注意 Apache Software Foundation
レッドハット
- Apache Hadoop の RPC プロトコルの実装における双方向認証を無効にされる脆弱性 CWE-287
不適切な認証
CVE-2013-2192 2015-08-3 18:14 2014-01-21 Show GitHub Exploit DB Packet Storm
207642 4.3 警告 Apache Software Foundation
オラクル
- Apache Santuario XML Security for Java における XML 署名を偽装される脆弱性 CWE-310
暗号の問題
CVE-2013-2172 2015-08-3 18:14 2013-06-17 Show GitHub Exploit DB Packet Storm
207643 6.8 警告 SpringSource - Spring Framework の Spring MVC の SourceHttpMessageConverter における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6429 2015-08-3 18:12 2013-11-7 Show GitHub Exploit DB Packet Storm
207644 5.2 警告 レッドハット - libvirt の libxl ドライバ内の libxlDomainGetNumaParameters 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6457 2015-08-3 18:07 2013-12-20 Show GitHub Exploit DB Packet Storm
207645 5.8 警告 OpenSSL Project
オラクル
- OpenSSL の DTLS の再送信の実装における異なるコンテキストの使用を誘発される脆弱性 CWE-310
暗号の問題
CVE-2013-6450 2015-08-3 18:07 2013-12-21 Show GitHub Exploit DB Packet Storm
207646 4.3 警告 OpenSSL Project
オラクル
- OpenSSL の ssl/s3_lib.c の ssl_get_algorithm2 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題
CVE-2013-6449 2015-08-3 18:07 2013-12-20 Show GitHub Exploit DB Packet Storm
207647 5 警告 Google
Mozilla Foundation
- Google Chrome などで使用される libjpeg-turbo の jdmarker.c における重要な情報を取得される脆弱性 CWE-189
数値処理の問題
CVE-2013-6630 2015-08-3 17:58 2013-11-12 Show GitHub Exploit DB Packet Storm
207648 10 危険 Pidgin - Pidgin の SIMPLE プロトコル機能における脆弱性 CWE-119
バッファエラー
CVE-2013-6490 2015-08-3 17:56 2013-11-4 Show GitHub Exploit DB Packet Storm
207649 5 警告 Pidgin - Pidgin の MXit 機能における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2013-6489 2015-08-3 17:56 2013-11-4 Show GitHub Exploit DB Packet Storm
207650 7.5 危険 Pidgin - Pidgin の Gadu-Gadu パーサの libpurple/protocols/gg/lib/http.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-6487 2015-08-3 17:56 2013-11-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
831 7.5 HIGH
Network
- - Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head… New CWE-444
HTTP Request Smuggling
CVE-2026-40562 2026-05-8 02:15 2026-05-6 Show GitHub Exploit DB Packet Storm
832 5.3 MEDIUM
Network
kazuho starlet Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head… Update CWE-444
HTTP Request Smuggling
CVE-2026-40561 2026-05-8 02:15 2026-05-3 Show GitHub Exploit DB Packet Storm
833 6.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exp… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-44113 2026-05-8 02:08 2026-05-7 Show GitHub Exploit DB Packet Storm
834 7.8 HIGH
Local
openclaw openclaw OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious… New CWE-184
 Incomplete Blacklist
CVE-2026-44114 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
835 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell ex… New CWE-184
 Incomplete Blacklist
CVE-2026-44115 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
836 8.6 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44116 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
837 5.8 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation. Attackers can bypass SSRF protections by sending crafted image U… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44117 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
838 7.8 HIGH
Local
openclaw openclaw OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can present themselves as owner to bypass owner-… New CWE-290
 Authentication Bypass by Spoofing
CVE-2026-44118 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
839 6.5 MEDIUM
Network
linuxcontainers incus Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage bucket import logic allows an authenticated user with access to the storage … New CWE-476
 NULL Pointer Dereference
CVE-2026-40195 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
840 6.5 MEDIUM
Network
linuxcontainers incus Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage … New CWE-476
 NULL Pointer Dereference
CVE-2026-40197 2026-05-8 02:06 2026-05-7 Show GitHub Exploit DB Packet Storm