Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
214521	7.5	危険	Google	-	複数の OS 上で稼働する Google Chrome で使用される Seccomp-BPF におけるサンドボックスの制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2014-1733	2014-04-30 15:03	2014-04-24	Show	GitHub Exploit DB Packet Storm

214522	7.5	危険	Google	-	複数の OS 上で稼働する Google Chrome の browser/ui/views/speech_recognition_bubble_views.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1732	2014-04-30 15:03	2014-04-24	Show	GitHub Exploit DB Packet Storm

214523	7.8	危険	Google	-	複数の OS 上で稼働する Google Chrome で使用される Google V8 におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1730	2014-04-30 15:02	2014-04-24	Show	GitHub Exploit DB Packet Storm

214524	4	警告	シスコシステムズ	-	Cisco Unified Communications Manager の Call Detail Records Management コンポーネントにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-2185	2014-04-30 14:29	2014-04-29	Show	GitHub Exploit DB Packet Storm

214525	5	警告	シスコシステムズ	-	Cisco Unified Communications Manager の IP Manager Assistant コンポーネントにおける重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2014-2184	2014-04-30 14:27	2014-04-29	Show	GitHub Exploit DB Packet Storm

214526	6.3	警告	シスコシステムズ	-	ASR 1000 ルータ上で稼働する Cisco IOS XE の L2TP モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2183	2014-04-30 14:26	2014-04-28	Show	GitHub Exploit DB Packet Storm

214527	6.1	警告	シスコシステムズ	-	Cisco Adaptive Security Appliance ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2182	2014-04-30 14:25	2014-04-29	Show	GitHub Exploit DB Packet Storm

214528	4	警告	シスコシステムズ	-	Cisco Unified Contact Center Express の Document Management コンポーネントにおけるファイルをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2014-2180	2014-04-30 14:24	2014-04-29	Show	GitHub Exploit DB Packet Storm

214529	5.8	警告	シーメンス	-	Siemens SIMATIC S7-1200 CPU デバイスの統合 Web サーバにおける CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2014-2909	2014-04-28 18:47	2014-04-24	Show	GitHub Exploit DB Packet Storm

214530	4.3	警告	シーメンス	-	Siemens SIMATIC S7-1200 CPU デバイスの統合 Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2908	2014-04-28 18:46	2014-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
401	5.3	MEDIUM Local	-	-	OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist. Attackers can exploit appro… New	CWE-184 Incomplete Blacklist	CVE-2026-41332	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

402	3.7	LOW Network	-	-	OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumvent shared authentication protections using fake device tokens. Attackers can e… New	CWE-799 Improper Control of Interaction Frequency	CVE-2026-41333	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

403	6.5	MEDIUM Network	-	-	OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized … New	CWE-636 Not Failing Securely ('Failing Open')	CVE-2026-41334	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

404	5.3	MEDIUM Network	-	-	OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers can extract sensitiv… New	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-41335	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

405	7.8	HIGH Local	-	-	OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled hook code. Attackers can replace trusted… New	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-41336	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

406	5.3	MEDIUM Network	-	-	OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attackers to mutate in-process callback origin before replay rejection. Attackers wi… New	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-41337	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

407	5.0	MEDIUM Local	-	-	OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit check-then-act pattern… New	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-41338	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

408	4.3	MEDIUM Network	-	-	OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specific filesystem paths… New	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-41339	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

409	6.5	MEDIUM Network	-	-	OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts. Attackers can exp… New	CWE-372 Incomplete Internal State Distinction	CVE-2026-41340	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm

410	5.4	MEDIUM Network	-	-	OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direct messages as direct messages in extensions/discord/src/monitor/agent-component… New	CWE-351 Insufficient Type Distinction	CVE-2026-41341	2026-04-24 23:40	2026-04-24	Show	GitHub Exploit DB Packet Storm