Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211291	5	警告	シスコシステムズ	-	Cisco Unified IP 9900 phones のファームウェアの Web フレームワークにおけるファイルをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2015-0604	2015-02-19 21:04	2015-02-4	Show	GitHub Exploit DB Packet Storm

211292	4.3	警告	シスコシステムズ	-	Cisco E メールセキュリティアプライアンス上で稼動する AsyncOS の uuencode 検査エンジンにおけるコンテンツの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-0605	2015-02-19 21:03	2015-02-6	Show	GitHub Exploit DB Packet Storm

211293	9	危険	シスコシステムズ	-	Cisco WebEx Meetings Server の管理 Web インターフェースにおけるルート権限で任意の OS コマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2015-0589	2015-02-19 21:03	2015-02-4	Show	GitHub Exploit DB Packet Storm

211294	5	警告	シスコシステムズ	-	Cisco Unified IP Phone 9900 シリーズのファームウェアのモビリティ拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-0600	2015-02-19 21:00	2015-02-4	Show	GitHub Exploit DB Packet Storm

211295	5	警告	シスコシステムズ	-	Cisco Unified IP Phone 9900 シリーズのファームウェアのモビリティ拡張における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2015-0602	2015-02-19 21:00	2015-02-4	Show	GitHub Exploit DB Packet Storm

211296	7.1	危険	シスコシステムズ	-	Cisco IOS の Measurement などの実装の Common Classification Engine におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2015-0609	2015-02-19 18:35	2015-02-11	Show	GitHub Exploit DB Packet Storm

211297	4	警告	シスコシステムズ	-	Cisco Adaptive Security Appliance Software におけるリソースへのアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8023	2015-02-19 18:35	2014-10-8	Show	GitHub Exploit DB Packet Storm

211298	10	危険	Google	-	Android の platform/frameworks/native/libs/ui/GraphicBuffer.cpp の GraphicBuffer::unflatten 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2015-1474	2015-02-19 18:34	2015-02-15	Show	GitHub Exploit DB Packet Storm

211299	5	警告	Google	-	Android 用 Google Email アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-1574	2015-02-19 18:33	2015-01-19	Show	GitHub Exploit DB Packet Storm

211300	6.8	警告	Motorola Solutions, Inc	-	Motorola Scanner SDK におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2015-1495	2015-02-19 18:24	2015-02-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1001	9.6	CRITICAL Network	-	-	Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to before version 2.0.1, the SCP middleware in charm.land/wish/v2 is vulnerable to path traversal attacks. A ma…	CWE-22 Path Traversal	CVE-2026-41589	2026-05-8 01:16	2026-05-7	Show	GitHub Exploit DB Packet Storm

1002	-		-	-	Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implements readObject() and …	CWE-502 Deserialization of Untrusted Data	CVE-2026-41586	2026-05-8 01:16	2026-05-7	Show	GitHub Exploit DB Packet Storm

1003	5.3	MEDIUM Network	openclaw	openclaw	OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks. Attackers can bypass …	CWE-862 Missing Authorization	CVE-2026-43572	2026-05-8 01:03	2026-05-5	Show	GitHub Exploit DB Packet Storm

1004	8.8	HIGH Network	openclaw	openclaw	OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugins. Attackers can expl…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-43571	2026-05-8 01:03	2026-05-5	Show	GitHub Exploit DB Packet Storm

1005	6.5	MEDIUM Network	openclaw	openclaw	OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Atta…	CWE-61 UNIX Symbolic Link (Symlink) Following	CVE-2026-43570	2026-05-8 01:03	2026-05-5	Show	GitHub Exploit DB Packet Storm

1006	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_notify_common() The connector number extracted from CCI via UCSI_CCI_CONNECTO…	CWE-129 Improper Validation of Array Index	CVE-2026-31729	2026-05-8 01:02	2026-05-2	Show	GitHub Exploit DB Packet Storm

1007	8.1	HIGH Network	openclaw	openclaw	OpenClaw before 2026.4.14 contains an authorization context reuse vulnerability in collect-mode queue batches that allows messages from different senders to inherit the final sender's authorization c…	CWE-266 Incorrect Privilege Assignment	CVE-2026-43535	2026-05-8 01:01	2026-05-5	Show	GitHub Exploit DB Packet Storm

1008	8.8	HIGH Network	openclaw	openclaw	OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting up…	CWE-15 External Control of System or Configuration Setting	CVE-2026-43531	2026-05-8 00:59	2026-05-5	Show	GitHub Exploit DB Packet Storm

1009	8.8	HIGH Network	openclaw	openclaw	OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybox applet execution that allows attackers to obscure which applet would actually…	CWE-863 Incorrect Authorization	CVE-2026-43530	2026-05-8 00:57	2026-05-5	Show	GitHub Exploit DB Packet Storm

1010	6.9	MEDIUM Network	-	-	Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is rendered using Blade unescaped output in public/theme/v2board/dashboard.blade.php. An admin can injec…	CWE-79 Cross-site Scripting	CVE-2026-37503	2026-05-8 00:53	2026-05-2	Show	GitHub Exploit DB Packet Storm