Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252071 6.6 警告 サイバートラスト株式会社
レッドハット
- QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2784 2010-09-7 15:51 2010-08-19 Show GitHub Exploit DB Packet Storm
252072 6.6 警告 サイバートラスト株式会社
レッドハット
- QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2010-0431 2010-09-7 15:50 2010-08-19 Show GitHub Exploit DB Packet Storm
252073 6.6 警告 サイバートラスト株式会社
レッドハット
- 複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0429 2010-09-7 15:49 2010-08-19 Show GitHub Exploit DB Packet Storm
252074 6.6 警告 サイバートラスト株式会社
レッドハット
- 複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2010-0428 2010-09-7 15:48 2010-08-19 Show GitHub Exploit DB Packet Storm
252075 - - ワイズテクノロジー - Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性 - - 2010-09-7 15:47 2010-08-17 Show GitHub Exploit DB Packet Storm
252076 7.8 危険 日立 - Hitachi Storage Command Suite 製品の組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
- 2010-09-7 15:45 2010-08-16 Show GitHub Exploit DB Packet Storm
252077 7.8 危険 日立 - JP1/Desktop Navigation 組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
- 2010-09-7 15:44 2010-08-16 Show GitHub Exploit DB Packet Storm
252078 4.3 警告 Zabbix - Zabbix の formatQuery 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2790 2010-09-7 15:42 2010-06-9 Show GitHub Exploit DB Packet Storm
252079 7.1 危険 レッドハット
X.Org Foundation
サイバートラスト株式会社
オラクル
- X.Org の X server の fbComposite 関数における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2010-1166 2010-09-6 18:42 2010-04-28 Show GitHub Exploit DB Packet Storm
252080 10 危険 サイバートラスト株式会社
Wireshark
レッドハット
- Wireshark の UDVM 解析部における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2010-2995 2010-09-6 17:48 2010-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff). This causes a pan… Update NVD-CWE-noinfo
CVE-2026-31542 2026-04-29 03:48 2026-04-25 Show GitHub Exploit DB Packet Storm
22 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() … Update NVD-CWE-noinfo
CVE-2026-31543 2026-04-29 03:46 2026-04-25 Show GitHub Exploit DB Packet Storm
23 4.3 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webhook targets. Attacke… New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-41362 2026-04-29 03:46 2026-04-28 Show GitHub Exploit DB Packet Storm
24 6.5 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploadInput function that bypasses file-system sandbox restrictions. Attackers can e… New CWE-22
Path Traversal
CVE-2026-41363 2026-04-29 03:46 2026-04-28 Show GitHub Exploit DB Packet Storm
25 8.1 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attackers to write arbitrary files. Attackers can exploit this by uploading tar archi… New CWE-59
Link Following
CVE-2026-41364 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
26 5.5 MEDIUM
Local
openclaw openclaw OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper me… New CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-41366 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
27 5.0 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component action… New CWE-863
 Incorrect Authorization
CVE-2026-41367 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
28 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin restrictions by using … New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-41368 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
29 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override variables. Attackers… New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-41369 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
30 8.5 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate targ… New CWE-863
 Incorrect Authorization
CVE-2026-41371 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm