Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251551 5 警告 オラクル - Oracle WebLogic Server における Web Services の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2320 2011-10-26 16:29 2011-10-18 Show GitHub Exploit DB Packet Storm
251552 4.3 警告 オラクル - Oracle WebLogic Server における JMS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2319 2011-10-26 16:28 2011-10-18 Show GitHub Exploit DB Packet Storm
251553 1.5 注意 オラクル - Oracle WebLogic Server における WLS Security の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2318 2011-10-26 16:27 2011-10-18 Show GitHub Exploit DB Packet Storm
251554 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Containers for J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2314 2011-10-26 16:26 2011-10-18 Show GitHub Exploit DB Packet Storm
251555 6.8 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2255 2011-10-26 16:25 2011-10-18 Show GitHub Exploit DB Packet Storm
251556 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2237 2011-10-26 16:24 2011-10-18 Show GitHub Exploit DB Packet Storm
251557 2.1 注意 アップル - Apple Mac OS X のオープンディレクトリにおけるパスワードデータを閲覧される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-3435 2011-10-26 09:47 2011-10-14 Show GitHub Exploit DB Packet Storm
251558 6.8 警告 アップル - Apple Mac OS X の libsecurity における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3227 2011-10-26 09:46 2011-10-14 Show GitHub Exploit DB Packet Storm
251559 6.8 警告 アップル - Apple Mac OS X のオープンディレクトリにおけるパスワード要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3226 2011-10-26 09:45 2011-10-14 Show GitHub Exploit DB Packet Storm
251560 5 警告 アップル - Apple Mac OS X の SMB ファイルサーバコンポーネントにおける閲覧制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3225 2011-10-26 09:44 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3561 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… CWE-125
CWE-416
CWE-787
Out-of-bounds Read
 Use After Free
 Out-of-bounds Write 		CVE-2026-6786 2026-04-29 04:45 2026-04-27 Show GitHub Exploit DB Packet Storm
3562 9.9 CRITICAL
Network 		apache camel The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExec… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-40453 2026-04-29 04:43 2026-04-27 Show GitHub Exploit DB Packet Storm
3563 7.8 HIGH
Local 		apache camel The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key directory using java.io.ObjectInputStream without applying any ObjectInputFilte… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40048 2026-04-29 04:43 2026-04-27 Show GitHub Exploit DB Packet Storm
3564 8.8 HIGH
Network 		apache camel The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. … CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40473 2026-04-29 04:43 2026-04-27 Show GitHub Exploit DB Packet Storm
3565 9.8 CRITICAL
Network 		apache camel JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via javax.jms.ObjectMessage.getObject() … CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40860 2026-04-29 04:42 2026-04-27 Show GitHub Exploit DB Packet Storm
3566 9.4 CRITICAL
Network 		apache camel The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter strategy used by the component (MailHeaderFilterStrategy) only filters the 'out' direction via setOu… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-33454 2026-04-29 04:42 2026-04-27 Show GitHub Exploit DB Packet Storm
3567 8.2 HIGH
Network 		apache camel When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via c… CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-40022 2026-04-29 04:41 2026-04-27 Show GitHub Exploit DB Packet Storm
3568 8.8 HIGH
Network 		apache camel The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInput… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40858 2026-04-29 04:41 2026-04-27 Show GitHub Exploit DB Packet Storm
3569 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.4.20 contains a scope enforcement bypass vulnerability in the assistant-media route that allows trusted-proxy callers without operator.read scope to access protected assistant-me… CWE-863
 Incorrect Authorization 		CVE-2026-41908 2026-04-29 04:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3570 5.4 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.4.20 contains an improper authorization vulnerability in paired-device pairing management that allows limited-scope sessions to enumerate and act on pairing requests. Attackers w… CWE-863
 Incorrect Authorization 		CVE-2026-41909 2026-04-29 04:40 2026-04-24 Show GitHub Exploit DB Packet Storm