Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2271	7.5	重要 Network	ネットギア	PR2000 ファームウェア	サポートが終了したNETGEAR製品におけるマニュアルに記載のない「TelnetEnable」機能	CWE-Other その他	CVE-2026-24714	2026-01-30 12:20	2026-01-30	Show	GitHub Exploit DB Packet Storm

2272	-	-	シーメンス	(複数の製品)	Siemens製品に対するアップデート（2026年1月）	-	-	2026-01-30 11:35	2026-01-14	Show	GitHub Exploit DB Packet Storm

2273	-	-	ジョンソンコントロールズ	Controller Configuration Tool (CCT) LCS8500 Metasys installation Application and Data Server (ADS) Metasys NAE8500 Metasys install…	複数のJohnson Controls製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2025-26385	2026-01-30 11:16	2026-01-29	Show	GitHub Exploit DB Packet Storm

2274	5.3	警告 Network	コニカミノルタビジネスソリューションズ株式会社リコーブラザー工業	(複数の製品)	ブラザー製複合機（MFP）における複数の脆弱性	CWE-295 CWE-912	CVE-2025-53869 CVE-2025-55704	2026-01-30 11:15	2026-01-29	Show	GitHub Exploit DB Packet Storm

2275	-	-	iba Systems	ibaPDA	iba Systems製ibaPDAにおける重要なリソースに対する不適切なアクセス権の割り当ての脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-14988	2026-01-30 11:15	2026-01-29	Show	GitHub Exploit DB Packet Storm

2276	-	-	Schneider Electric	Odace cFMT 2a Wiser iTRV2 Merten cFMT 2a Fuga Connected Socket Outlet Wiser Connected Rotary Dimmer Iconic Wiser Co…	複数のSchneider Electric製品における複数の脆弱性	CWE-120 CWE-400	CVE-2024-10106 CVE-2024-6350 CVE-2024-6351 CVE-2024-6352 CVE-2024-7322	2026-01-30 11:15	2026-01-29	Show	GitHub Exploit DB Packet Storm

2277	-	-	Apache Friends	XAMPP	Festo Didactic SE製MES PCにプリインストールされたXAMPPにおける複数の脆弱性	-	-	2026-01-30 11:15	2026-01-29	Show	GitHub Exploit DB Packet Storm

2278	8.8	重要 Network	Google	Google Chrome	Google の Google Chrome における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2022-3655	2026-01-29 18:22	2022-10-25	Show	GitHub Exploit DB Packet Storm

2279	9.8	緊急 Network	ServiceNow	Now Assist AI Agents Virtual Agent API	ServiceNowのNow Assist AI Agents等の複数製品における不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2025-12420	2026-01-29 16:03	2026-01-12	Show	GitHub Exploit DB Packet Storm

2280	7.8	重要 Local	ASUSTeK Computer Inc.	myasus	ASUSTeK Computer Inc.のmyasusにおける信頼できない検索パスに関する脆弱性	CWE-426 信頼性のない検索パス	CVE-2025-12793	2026-01-29 16:03	2026-01-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
11	7.8	HIGH Local	openclaw	openclaw	OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled hook code. Attackers can replace trusted… Update	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-41336	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

12	5.3	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers can extract sensitiv… Update	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-41335	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

13	6.5	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized … Update	CWE-636 Not Failing Securely ('Failing Open')	CVE-2026-41334	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

14	3.7	LOW Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumvent shared authentication protections using fake device tokens. Attackers can e… Update	CWE-799 Improper Control of Interaction Frequency	CVE-2026-41333	2026-04-29 03:55	2026-04-24	Show	GitHub Exploit DB Packet Storm

15	8.8	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism. Attackers with device pairing credentials … Update	CWE-862 Missing Authorization	CVE-2026-41352	2026-04-29 03:54	2026-04-24	Show	GitHub Exploit DB Packet Storm

16	7.5	HIGH Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_… Update	NVD-CWE-noinfo	CVE-2026-31539	2026-04-29 03:54	2026-04-25	Show	GitHub Exploit DB Packet Storm

17	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create We have recently observed a number of subvolumes with broken dentries. … Update	CWE-476 NULL Pointer Dereference	CVE-2026-31519	2026-04-29 03:54	2026-04-22	Show	GitHub Exploit DB Packet Storm

18	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check set_default_submission() before deferencing When the i915 driver firmware binaries are not present, the set_de… Update	CWE-476 NULL Pointer Dereference	CVE-2026-31540	2026-04-29 03:52	2026-04-25	Show	GitHub Exploit DB Packet Storm

19	7.5	HIGH Network	joinmastodon	mastodon	Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and perfo… Update	CWE-841 Improper Enforcement of Behavioral Workflow	CVE-2026-41259	2026-04-29 03:50	2026-04-24	Show	GitHub Exploit DB Packet Storm

20	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates When the "copy_trace_marker" option is enabled for an instance, anything written… Update	CWE-416 Use After Free	CVE-2026-31541	2026-04-29 03:50	2026-04-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed