Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
237261 7.5 危険 justin koivisto - PHP 用の Justin Koivisto SecurityAdmin における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2628 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237262 7.5 危険 jakub steiner - Jakub Steiner の inc/config.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2620 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237263 10 危険 Novell - Novell NetMail の NMDMC.EXE サービスにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2616 2012-09-25 16:47 2007-05-4 Show GitHub Exploit DB Packet Storm
237264 4.3 警告 openld - OpenLD におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2610 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237265 7.5 危険 miplex2 - Miplex2 の lib/smarty/SmartyFU.class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2608 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237266 7.5 危険 lavague - LaVague の views/print/printbar.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2607 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237267 7.8 危険 Ipswitch, Inc. - Ipswitch WhatsUp Gold の MIBEXTRA.EXE におけるバッファオーバーフローの脆弱性 - CVE-2007-2602 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237268 7.5 危険 マイクロソフト - Microsoft Windows 2003 Server の Terminal Server における中間者攻撃を実行される脆弱性 - CVE-2007-2593 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237269 4.3 警告 ノキア - Nokia Intellisync Mobile Suite などにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2592 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
237270 7.5 危険 ノキア - Nokia Intellisync Mobile Suite などの usrmgr/userList.asp におけるユーザアカウントを変更される脆弱性 - CVE-2007-2591 2012-09-25 16:47 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
951 5.3 MEDIUM
Network 		torproject tor Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2026-44599 2026-05-8 02:31 2026-05-7 Show GitHub Exploit DB Packet Storm
952 5.3 MEDIUM
Network 		torproject tor Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010. CWE-696
 Incorrect Behavior Order 		CVE-2026-44600 2026-05-8 02:26 2026-05-7 Show GitHub Exploit DB Packet Storm
953 9.1 CRITICAL
Network 		torproject tor Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007. CWE-193
 Off-by-one Error 		CVE-2026-44603 2026-05-8 02:24 2026-05-7 Show GitHub Exploit DB Packet Storm
954 8.8 HIGH
Local 		- - NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container … CWE-22
Path Traversal 		CVE-2026-7875 2026-05-8 02:15 2026-05-7 Show GitHub Exploit DB Packet Storm
955 7.5 HIGH
Network 		- - Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head… CWE-444
HTTP Request Smuggling 		CVE-2026-40562 2026-05-8 02:15 2026-05-6 Show GitHub Exploit DB Packet Storm
956 5.3 MEDIUM
Network 		kazuho starlet Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head… CWE-444
HTTP Request Smuggling 		CVE-2026-40561 2026-05-8 02:15 2026-05-3 Show GitHub Exploit DB Packet Storm
957 6.3 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exp… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-44113 2026-05-8 02:08 2026-05-7 Show GitHub Exploit DB Packet Storm
958 7.8 HIGH
Local 		openclaw openclaw OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious… CWE-184
 Incomplete Blacklist 		CVE-2026-44114 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
959 8.8 HIGH
Network 		openclaw openclaw OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell ex… CWE-184
 Incomplete Blacklist 		CVE-2026-44115 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
960 8.6 HIGH
Network 		openclaw openclaw OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-44116 2026-05-8 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm