Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208441 9.4 危険 InFocus Corporation - InFocus IN3128HD プロジェクタのファームウェアにおける DHCP サーバおよびデバイスの IP 設定を変更される脆弱性 CWE-Other
その他
CVE-2014-8384 2015-05-20 15:13 2015-04-27 Show GitHub Exploit DB Packet Storm
208442 10 危険 InFocus Corporation - InFocus IN3128HD プロジェクタのファームウェアにおける認証を回避される脆弱性 CWE-Other
その他
CVE-2014-8383 2015-05-20 15:12 2015-04-27 Show GitHub Exploit DB Packet Storm
208443 4 警告 Huawei - Huawei SEQ Analyst の XML 外部エンティティにおける任意のファイルを読まれる脆弱性 CWE-Other
その他
CVE-2015-2346 2015-05-20 15:01 2015-04-15 Show GitHub Exploit DB Packet Storm
208444 7.8 危険 PowerDNS - PowerDNS Recursor および Authoritative Server のラベル展開機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-1868 2015-05-20 14:13 2015-04-28 Show GitHub Exploit DB Packet Storm
208445 5 警告 realmd project - realmd における sssd.conf および smb.conf に任意の設定を挿入される脆弱性 CWE-Other
その他
CVE-2015-2704 2015-05-20 14:06 2015-04-14 Show GitHub Exploit DB Packet Storm
208446 10 危険 Fedora Project
libuv project
- libuv における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0278 2015-05-20 13:44 2015-02-20 Show GitHub Exploit DB Packet Storm
208447 6.9 警告 Rockwell Automation - Rockwell Automation RSLinx Classic の OPCTest.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9204 2015-05-20 10:27 2014-12-2 Show GitHub Exploit DB Packet Storm
208448 7.5 危険 Hancom Inc. - 複数の Hancom 製品で使用される Hancom Office HanWord プロセッサの HwpApp::CHncSDS_Manager 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-2810 2015-05-20 10:14 2015-04-13 Show GitHub Exploit DB Packet Storm
208449 7.2 危険 シスコシステムズ - Cisco Unified Communications Manager における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2015-0717 2015-05-20 10:03 2015-05-8 Show GitHub Exploit DB Packet Storm
208450 6.1 警告 シスコシステムズ - Cisco IOS の ISDN の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-0731 2015-05-19 18:19 2015-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 6.1 MEDIUM
Local
openclaw openclaw OpenClaw before 2026.3.31 fails to properly sanitize PIP_INDEX_URL and UV_INDEX_URL environment variables in host execution contexts, allowing attackers to redirect Python package-index traffic. Atta… New CWE-184
 Incomplete Blacklist
CVE-2026-41391 2026-05-1 05:42 2026-04-29 Show GitHub Exploit DB Packet Storm
482 7.3 HIGH
Local
openclaw openclaw OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap /usr/bin/script and similar wrappers before storing trust decisions. Attackers… New CWE-807
 Reliance on Untrusted Inputs in a Security Decision
CVE-2026-41390 2026-05-1 05:38 2026-04-29 Show GitHub Exploit DB Packet Storm
483 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the application to rehydrate r… New CWE-372
 Incomplete Internal State Distinction
CVE-2026-41388 2026-05-1 05:37 2026-04-29 Show GitHub Exploit DB Packet Storm
484 7.8 HIGH
Local
openclaw openclaw OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in host-env-security-policy.json and host-env-security.ts that allows package-manager environment… New CWE-183
 Permissive List of Allowed Inputs
CVE-2026-41387 2026-05-1 05:36 2026-04-29 Show GitHub Exploit DB Packet Storm
485 7.6 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.8 contains a server-side request forgery policy bypass vulnerability allowing attackers to trigger navigations bypassing normal SSRF checks. Attackers can exploit browser inter… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41912 2026-05-1 04:38 2026-04-29 Show GitHub Exploit DB Packet Storm
486 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit upload_file and u… New CWE-22
Path Traversal
CVE-2026-41911 2026-05-1 04:38 2026-04-29 Show GitHub Exploit DB Packet Storm
487 4.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.8 omits owner-only enforcement for cross-channel allowlist writes in the /allowlist endpoint. An authorized non-owner sender can bypass access controls to perform allowlist mod… New CWE-863
 Incorrect Authorization
CVE-2026-41910 2026-05-1 04:38 2026-04-29 Show GitHub Exploit DB Packet Storm
488 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations. Attackers can exhaust disk spa… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-41408 2026-05-1 04:38 2026-04-29 Show GitHub Exploit DB Packet Storm
489 5.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-length comparison helpers. Attacker… New CWE-208
 Information Exposure Through Timing Discrepancy
CVE-2026-41407 2026-05-1 04:38 2026-04-29 Show GitHub Exploit DB Packet Storm
490 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, and thread context m… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-41406 2026-05-1 04:37 2026-04-29 Show GitHub Exploit DB Packet Storm