Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252081 3.5 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2274 2011-09-9 09:52 2011-07-19 Show GitHub Exploit DB Packet Storm
252082 3.5 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2282 2011-09-9 09:51 2011-07-19 Show GitHub Exploit DB Packet Storm
252083 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2280 2011-09-9 09:50 2011-07-19 Show GitHub Exploit DB Packet Storm
252084 4.3 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2275 2011-09-9 09:49 2011-07-19 Show GitHub Exploit DB Packet Storm
252085 4.3 警告 リアルネットワークス - RealNetworks RealPlayer の ActiveX コントロールにおけるクロスゾーンスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2947 2011-09-8 13:36 2011-08-16 Show GitHub Exploit DB Packet Storm
252086 10 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer Enterprise の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-2946 2011-09-8 13:35 2011-08-16 Show GitHub Exploit DB Packet Storm
252087 9.3 危険 リアルネットワークス - RealNetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2945 2011-09-8 13:34 2011-08-16 Show GitHub Exploit DB Packet Storm
252088 10 危険 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-0084 2011-09-8 13:33 2011-08-16 Show GitHub Exploit DB Packet Storm
252089 4.3 警告 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい
CVE-2011-2983 2011-09-8 13:32 2011-08-16 Show GitHub Exploit DB Packet Storm
252090 10 危険 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品におけるクローム特権で任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-2984 2011-09-7 11:35 2011-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4281 7.5 HIGH
Network
joinmastodon mastodon Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and perfo… CWE-841
 Improper Enforcement of Behavioral Workflow
CVE-2026-41259 2026-04-29 03:50 2026-04-24 Show GitHub Exploit DB Packet Storm
4282 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates When the "copy_trace_marker" option is enabled for an instance, anything written… CWE-416
 Use After Free
CVE-2026-31541 2026-04-29 03:50 2026-04-25 Show GitHub Exploit DB Packet Storm
4283 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff). This causes a pan… NVD-CWE-noinfo
CVE-2026-31542 2026-04-29 03:48 2026-04-25 Show GitHub Exploit DB Packet Storm
4284 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() … NVD-CWE-noinfo
CVE-2026-31543 2026-04-29 03:46 2026-04-25 Show GitHub Exploit DB Packet Storm
4285 4.3 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webhook targets. Attacke… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-41362 2026-04-29 03:46 2026-04-28 Show GitHub Exploit DB Packet Storm
4286 6.5 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploadInput function that bypasses file-system sandbox restrictions. Attackers can e… CWE-22
Path Traversal
CVE-2026-41363 2026-04-29 03:46 2026-04-28 Show GitHub Exploit DB Packet Storm
4287 8.1 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attackers to write arbitrary files. Attackers can exploit this by uploading tar archi… CWE-59
Link Following
CVE-2026-41364 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
4288 5.5 MEDIUM
Local
openclaw openclaw OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper me… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-41366 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
4289 5.0 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component action… CWE-863
 Incorrect Authorization
CVE-2026-41367 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
4290 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin restrictions by using … CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-41368 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm