Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
238721 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-3659 2012-08-10 14:32 2012-01-31 Show GitHub Exploit DB Packet Storm
238722 3.5 注意 日立 - 日立の JP1/Integrated Management - Service Support におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2012-08-10 14:02 2012-08-8 Show GitHub Exploit DB Packet Storm
238723 4 警告 Linux - x86 プラットフォーム上の Linux Kernel におけるサービス運用妨害 (パニック) の脆弱性 CWE-362
競合状態
CVE-2012-2373 2012-08-10 11:43 2012-08-9 Show GitHub Exploit DB Packet Storm
238724 7.5 危険 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-2863 2012-08-10 11:35 2012-08-8 Show GitHub Exploit DB Packet Storm
238725 6.8 警告 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2862 2012-08-10 11:32 2012-08-8 Show GitHub Exploit DB Packet Storm
238726 5.6 警告 Todd C. Miller
レッドハット
- RHEL 上で稼働する sudo 用の特定の Red Hat のスクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2012-3440 2012-08-10 10:33 2012-08-7 Show GitHub Exploit DB Packet Storm
238727 7.5 危険 IBM - IBM Global Security Kit における SSL サーバになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2203 2012-08-10 10:29 2012-08-8 Show GitHub Exploit DB Packet Storm
238728 5 警告 IBM - IBM Global Security Kit におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-2191 2012-08-10 10:27 2012-08-8 Show GitHub Exploit DB Packet Storm
238729 6.5 警告 Chef Software, Inc. - Chef の Chef Server におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5098 2012-08-10 10:13 2011-10-1 Show GitHub Exploit DB Packet Storm
238730 5.5 警告 Chef Software, Inc. - Chef の Chef Server における cookbooks をアップロードまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5097 2012-08-10 10:11 2011-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
721 7.7 HIGH
Network
- - OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the final browser target after navigatio… New CWE-862
 Missing Authorization
CVE-2026-42436 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
722 8.8 HIGH
Network
- - OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to inject environment variable assignments at the argv level. Attack… New CWE-184
 Incomplete Blacklist
CVE-2026-42435 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
723 8.8 HIGH
Network
- - OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass sandbox boundaries … New CWE-863
 Incorrect Authorization
CVE-2026-42434 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
724 6.5 MEDIUM
Network
- - OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can… New CWE-862
 Missing Authorization
CVE-2026-42433 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
725 6.1 MEDIUM
Network
- - AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Att… New CWE-79
Cross-site Scripting
CVE-2023-54349 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
726 8.8 HIGH
Network
- - ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to execute arbitrary code by injecting formula payloads into vendor name fields. Attackers can add malicious … New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2023-54348 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
727 7.5 HIGH
Network
- - OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers c… New CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2023-54347 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
728 7.5 HIGH
Network
- - WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file path… New CWE-538
 File and Directory Information Exposure
CVE-2023-54346 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
729 8.8 HIGH
Network
- - Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame intr… New CWE-94
Code Injection
CVE-2023-54345 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
730 9.8 CRITICAL
Network
- - Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interface.… New CWE-306
Missing Authentication for Critical Function
CVE-2023-54344 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm