Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2201	9.8	緊急 Network	Qode Interactive	Grill and Chow	Qode InteractiveのWordPress用Grill and Chowにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2025-49297	2026-02-2 19:19	2025-06-9	Show	GitHub Exploit DB Packet Storm

2202	9.8	緊急 Network	David Beazley	PLY (Python Lex-Yacc)	David BeazleyのPLY (Python Lex-Yacc)における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-56005	2026-02-2 19:19	2026-01-20	Show	GitHub Exploit DB Packet Storm

2203	8.8	重要 Network	Ruijie Networks	X30 Pro ファームウェア RG-EW300T Firmware	Ruijie NetworksのRG-EW300T Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-56092	2026-02-2 19:19	2025-12-11	Show	GitHub Exploit DB Packet Storm

2204	6.5	警告 Network	サイボウズ	サイボウズガルーン	サイボウズ Garoonにおける複数の脆弱性	CWE-79 CWE-Other	CVE-2026-20711 CVE-2026-22881 CVE-2026-22888	2026-02-2 12:21	2026-02-2	Show	GitHub Exploit DB Packet Storm

2205	-	-	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Office Office Deployment Tool	Microsoft Office Click-To-Run Remote Code Execution Vulnerability	CWE-Other その他	CVE-2026-20943	2026-02-2 12:15	2026-02-2	Show	GitHub Exploit DB Packet Storm

2206	7.6	重要 Network	Sonatype Inc.	Nexus	Sonatype Nexus Repositoryにおけるサーバサイドリクエストフォージェリの脆弱性	CWE-Other その他	CVE-2026-0600	2026-02-2 12:07	2026-02-2	Show	GitHub Exploit DB Packet Storm

2207	8.8	重要 Network	RaspAP	raspap-webgui	raspap-webguiにおけるOSコマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-24788	2026-02-2 12:03	2026-02-2	Show	GitHub Exploit DB Packet Storm

2208	-	-		-	サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01373)による影響について	-	CVE-2025-24519 CVE-2025-26694 CVE-2025-27710 CVE-2025-27713 CVE-2025-30509 CVE-2025-31937 CVE-2025-32088 CVE-2025-32446 CVE-2025-32732 CVE-2025-33000	2026-02-2 11:04	2026-01-30	Show	GitHub Exploit DB Packet Storm

2209	-	-	BrightSign, LLC	BrightSignOS シリーズ 5 プレーヤー BrightSignOS シリーズ 4 プレーヤー	BrightSign製Brightsignプレーヤーにおける複数の脆弱性	CWE-250 不要な特権による実行	CVE-2025-3925 CVE-2025-54756	2026-02-2 10:53	2025-05-7	Show	GitHub Exploit DB Packet Storm

2210	-	-	kiloview	P2 hardware E1 hardware RE1 hardware P1 hardware E2 hardware G1 hardware E1-s hardware	KiloView製エンコーダーシリーズにおける重要な機能に対する認証の欠如の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-1453	2026-02-2 10:39	2026-01-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
21	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff). This causes a pan… Update	NVD-CWE-noinfo	CVE-2026-31542	2026-04-29 03:48	2026-04-25	Show	GitHub Exploit DB Packet Storm

22	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() … Update	NVD-CWE-noinfo	CVE-2026-31543	2026-04-29 03:46	2026-04-25	Show	GitHub Exploit DB Packet Storm

23	4.3	MEDIUM Network	openclaw	openclaw	OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webhook targets. Attacke… New	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-41362	2026-04-29 03:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

24	6.5	MEDIUM Network	openclaw	openclaw	OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploadInput function that bypasses file-system sandbox restrictions. Attackers can e… New	CWE-22 Path Traversal	CVE-2026-41363	2026-04-29 03:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

25	8.1	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attackers to write arbitrary files. Attackers can exploit this by uploading tar archi… New	CWE-59 Link Following	CVE-2026-41364	2026-04-29 03:45	2026-04-28	Show	GitHub Exploit DB Packet Storm

26	5.5	MEDIUM Local	openclaw	openclaw	OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper me… New	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-41366	2026-04-29 03:45	2026-04-28	Show	GitHub Exploit DB Packet Storm

27	5.0	MEDIUM Network	openclaw	openclaw	OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component action… New	CWE-863 Incorrect Authorization	CVE-2026-41367	2026-04-29 03:45	2026-04-28	Show	GitHub Exploit DB Packet Storm

28	6.5	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin restrictions by using … New	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-41368	2026-04-29 03:44	2026-04-28	Show	GitHub Exploit DB Packet Storm

29	6.5	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override variables. Attackers… New	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-41369	2026-04-29 03:44	2026-04-28	Show	GitHub Exploit DB Packet Storm

30	8.5	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate targ… New	CWE-863 Incorrect Authorization	CVE-2026-41371	2026-04-29 03:44	2026-04-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed