Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208421 3.5 注意 Debian
ownCloud
- ownCloud Server Community Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3011 2015-05-12 15:46 2015-03-25 Show GitHub Exploit DB Packet Storm
208422 4.3 警告 KO GmbH
ownCloud
- WebODF におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9716 2015-05-12 15:44 2014-12-4 Show GitHub Exploit DB Packet Storm
208423 4.3 警告 Huawei - Huawei SEQ Analyst におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2347 2015-05-12 15:32 2015-04-16 Show GitHub Exploit DB Packet Storm
208424 5 警告 株式会社ラクス - メールディーラーにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0915 2015-05-12 12:02 2015-05-12 Show GitHub Exploit DB Packet Storm
208425 5 警告 レッドハット - Red Hat JBoss Enterprise Application の Platformorg.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-3481 2015-05-11 18:22 2014-06-26 Show GitHub Exploit DB Packet Storm
208426 6.8 警告 アップル
日立
Apache Software Foundation
オラクル
- Apache HTTP Server の mod_status モジュールおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2014-0226 2015-05-11 18:22 2014-07-14 Show GitHub Exploit DB Packet Storm
208427 5 警告 アップル
Apache Software Foundation
オラクル
- Apache HTTP Server の mod_cgid モジュールおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-0231 2015-05-11 18:22 2014-07-14 Show GitHub Exploit DB Packet Storm
208428 4.9 警告 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される JBoss Application Server の SimpleSecurityManager の isCallerInRole 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3472 2015-05-11 18:22 2014-08-6 Show GitHub Exploit DB Packet Storm
208429 10 危険 アップル
日立
サン・マイクロシステムズ
- Oracle Java SE の Java Runtime Environment (JRE) における Hotspot の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1723 2015-05-11 16:24 2012-06-12 Show GitHub Exploit DB Packet Storm
208430 9.3 危険 マイクロソフト - Microsoft Word およびその他の製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1761 2015-05-11 16:24 2014-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 - - - Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to tri… New CWE-125
Out-of-bounds Read
CVE-2026-2810 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
72 3.3 LOW
Local
uutils coreutils A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the [:graph:] and [:print:] character classes. The implementation mistakenly includes the ASCII space char… Update CWE-684
 Incorrect Provision of Specified Functionality
CVE-2026-35379 2026-04-30 00:59 2026-04-23 Show GitHub Exploit DB Packet Storm
73 5.5 MEDIUM
Local
uutils coreutils A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) as an empty delimiter. The implementation mistakenl… Update CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-35380 2026-04-30 00:57 2026-04-23 Show GitHub Exploit DB Packet Storm
74 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direct messages as direct messages in extensions/discord/src/monitor/agent-component… Update CWE-351
 Insufficient Type Distinction
CVE-2026-41341 2026-04-30 00:56 2026-04-24 Show GitHub Exploit DB Packet Storm
75 8.1 HIGH
Adjacent
openclaw openclaw OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persists unauthenticated discovery endpoints without explicit trust confirmation. Att… Update CWE-346
 Origin Validation Error
CVE-2026-41342 2026-04-30 00:55 2026-04-24 Show GitHub Exploit DB Packet Storm
76 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verboseLevel session overrides. Attack… Update CWE-863
 Incorrect Authorization
CVE-2026-41344 2026-04-30 00:52 2026-04-24 Show GitHub Exploit DB Packet Storm
77 10.0 CRITICAL
Network
voidzero vite\+ Vite+ is a unified toolchain and entry point for web development. Prior to version 0.1.17, `downloadPackageManager()` accepts an untrusted `version` string and uses it directly in filesystem paths. A… Update CWE-22
Path Traversal
CVE-2026-41211 2026-04-30 00:49 2026-04-23 Show GitHub Exploit DB Packet Storm
78 7.8 HIGH
Local
parzivalhack pyspector PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. The plugin security validator in PySpector uses AST-based static analysis to preve… Update CWE-184
 Incomplete Blacklist
CVE-2026-41206 2026-04-30 00:48 2026-04-23 Show GitHub Exploit DB Packet Storm
79 5.4 MEDIUM
Network
siemvk openlearn OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `safeMode` is enabled, unapproved forum posts are hidden from the public list, but … Update CWE-284
Improper Access Control
CVE-2026-41243 2026-04-30 00:39 2026-04-23 Show GitHub Exploit DB Packet Storm
80 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but… Update CWE-416
 Use After Free
CVE-2026-31532 2026-04-30 00:26 2026-04-23 Show GitHub Exploit DB Packet Storm