Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2201	9.8	緊急 Network	Qode Interactive	Grill and Chow	Qode InteractiveのWordPress用Grill and Chowにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2025-49297	2026-02-2 19:19	2025-06-9	Show	GitHub Exploit DB Packet Storm

2202	9.8	緊急 Network	David Beazley	PLY (Python Lex-Yacc)	David BeazleyのPLY (Python Lex-Yacc)における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-56005	2026-02-2 19:19	2026-01-20	Show	GitHub Exploit DB Packet Storm

2203	8.8	重要 Network	Ruijie Networks	X30 Pro ファームウェア RG-EW300T Firmware	Ruijie NetworksのRG-EW300T Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-56092	2026-02-2 19:19	2025-12-11	Show	GitHub Exploit DB Packet Storm

2204	6.5	警告 Network	サイボウズ	サイボウズガルーン	サイボウズ Garoonにおける複数の脆弱性	CWE-79 CWE-Other	CVE-2026-20711 CVE-2026-22881 CVE-2026-22888	2026-02-2 12:21	2026-02-2	Show	GitHub Exploit DB Packet Storm

2205	-	-	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Office Office Deployment Tool	Microsoft Office Click-To-Run Remote Code Execution Vulnerability	CWE-Other その他	CVE-2026-20943	2026-02-2 12:15	2026-02-2	Show	GitHub Exploit DB Packet Storm

2206	7.6	重要 Network	Sonatype Inc.	Nexus	Sonatype Nexus Repositoryにおけるサーバサイドリクエストフォージェリの脆弱性	CWE-Other その他	CVE-2026-0600	2026-02-2 12:07	2026-02-2	Show	GitHub Exploit DB Packet Storm

2207	8.8	重要 Network	RaspAP	raspap-webgui	raspap-webguiにおけるOSコマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-24788	2026-02-2 12:03	2026-02-2	Show	GitHub Exploit DB Packet Storm

2208	-	-		-	サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01373)による影響について	-	CVE-2025-24519 CVE-2025-26694 CVE-2025-27710 CVE-2025-27713 CVE-2025-30509 CVE-2025-31937 CVE-2025-32088 CVE-2025-32446 CVE-2025-32732 CVE-2025-33000	2026-02-2 11:04	2026-01-30	Show	GitHub Exploit DB Packet Storm

2209	-	-	BrightSign, LLC	BrightSignOS シリーズ 5 プレーヤー BrightSignOS シリーズ 4 プレーヤー	BrightSign製Brightsignプレーヤーにおける複数の脆弱性	CWE-250 不要な特権による実行	CVE-2025-3925 CVE-2025-54756	2026-02-2 10:53	2025-05-7	Show	GitHub Exploit DB Packet Storm

2210	-	-	kiloview	P2 hardware E1 hardware RE1 hardware P1 hardware E2 hardware G1 hardware E1-s hardware	KiloView製エンコーダーシリーズにおける重要な機能に対する認証の欠如の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-1453	2026-02-2 10:39	2026-01-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
11	7.8	HIGH Local	openclaw	openclaw	OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled hook code. Attackers can replace trusted… Update	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-41336	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

12	5.3	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers can extract sensitiv… Update	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-41335	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

13	6.5	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized … Update	CWE-636 Not Failing Securely ('Failing Open')	CVE-2026-41334	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

14	3.7	LOW Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumvent shared authentication protections using fake device tokens. Attackers can e… Update	CWE-799 Improper Control of Interaction Frequency	CVE-2026-41333	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

15	8.8	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism. Attackers with device pairing credentials … Update	CWE-862 Missing Authorization	CVE-2026-41352	2026-04-29 03:54	2026-04-24	Show	GitHub Exploit DB Packet Storm

16	7.5	HIGH Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_… Update	NVD-CWE-noinfo	CVE-2026-31539	2026-04-29 03:54	2026-04-25	Show	GitHub Exploit DB Packet Storm

17	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create We have recently observed a number of subvolumes with broken dentries. … Update	CWE-476 NULL Pointer Dereference	CVE-2026-31519	2026-04-29 03:54	2026-04-22	Show	GitHub Exploit DB Packet Storm

18	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check set_default_submission() before deferencing When the i915 driver firmware binaries are not present, the set_de… Update	CWE-476 NULL Pointer Dereference	CVE-2026-31540	2026-04-29 03:52	2026-04-25	Show	GitHub Exploit DB Packet Storm

19	7.5	HIGH Network	joinmastodon	mastodon	Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and perfo… Update	CWE-841 Improper Enforcement of Behavioral Workflow	CVE-2026-41259	2026-04-29 03:50	2026-04-24	Show	GitHub Exploit DB Packet Storm

20	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates When the "copy_trace_marker" option is enabled for an instance, anything written… Update	CWE-416 Use After Free	CVE-2026-31541	2026-04-29 03:50	2026-04-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed