Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252311 7.8 危険 シスコシステムズ - Cisco Network Admission Control (NAC) Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3305 2011-11-9 10:55 2011-10-5 Show GitHub Exploit DB Packet Storm
252312 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスおよび Cisco Catalyst 6500 シリーズにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3304 2011-11-9 10:55 2011-10-5 Show GitHub Exploit DB Packet Storm
252313 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード)の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3303 2011-11-9 10:54 2011-10-5 Show GitHub Exploit DB Packet Storm
252314 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード)の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3302 2011-11-9 10:54 2011-10-5 Show GitHub Exploit DB Packet Storm
252315 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード)の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3301 2011-11-9 10:53 2011-10-5 Show GitHub Exploit DB Packet Storm
252316 2.6 注意 株式会社スカイアークシステム - 複数のスカイアークシステム製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3994 2011-11-8 17:29 2011-10-31 Show GitHub Exploit DB Packet Storm
252317 4 警告 株式会社スカイアークシステム - 複数のスカイアークシステム製品におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3993 2011-11-8 17:29 2011-10-31 Show GitHub Exploit DB Packet Storm
252318 10 危険 IBM - IBM WebSphere Commerce における脆弱性 CWE-287
不適切な認証 		CVE-2011-3577 2011-11-8 14:22 2011-09-20 Show GitHub Exploit DB Packet Storm
252319 4.3 警告 Wireshark - Wireshark の OpenSafety 解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3484 2011-11-8 14:21 2011-09-7 Show GitHub Exploit DB Packet Storm
252320 4.3 警告 Wireshark - Wireshark におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3483 2011-11-8 14:21 2011-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4801 8.1 HIGH
Network 		senselive x3500_firmware A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes on the backend. After the device… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-39462 2026-04-29 04:04 2026-04-24 Show GitHub Exploit DB Packet Storm
4802 8.1 HIGH
Network 		projectcontour contour Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33.4, v1.32.5, and v1.31.6, Contour's Cookie Rewriting feature is vulnerable to Lua code injection. An attacker… CWE-94
Code Injection 		CVE-2026-41246 2026-04-29 04:04 2026-04-24 Show GitHub Exploit DB Packet Storm
4803 8.1 HIGH
Network 		senselive x3500_firmware A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inad… CWE-862
 Missing Authorization 		CVE-2026-40623 2026-04-29 04:02 2026-04-24 Show GitHub Exploit DB Packet Storm
4804 9.8 CRITICAL
Network 		senselive x3500_firmware A vulnerability in  SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network acc… CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-40630 2026-04-29 04:01 2026-04-24 Show GitHub Exploit DB Packet Storm
4805 9.8 CRITICAL
Network 		huggingface lerobot LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels wit… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-25874 2026-04-29 04:01 2026-04-24 Show GitHub Exploit DB Packet Storm
4806 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_i… NVD-CWE-Other
CVE-2026-31538 2026-04-29 03:59 2026-04-25 Show GitHub Exploit DB Packet Storm
4807 9.8 CRITICAL
Network 		std42 elfinder elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injection vulnerability in the resize command. The bg (background … CWE-78
OS Command  		CVE-2026-41247 2026-04-29 03:57 2026-04-24 Show GitHub Exploit DB Packet Storm
4808 5.3 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests. Attackers can re-enc… CWE-294
Authentication Bypass by Capture-replay  		CVE-2026-41351 2026-04-29 03:56 2026-04-24 Show GitHub Exploit DB Packet Storm
4809 4.3 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains a session visibility bypass vulnerability where the session_status function fails to enforce configured tools.sessions.visibility restrictions for unsandboxed invoc… CWE-863
 Incorrect Authorization 		CVE-2026-41350 2026-04-29 03:56 2026-04-24 Show GitHub Exploit DB Packet Storm
4810 7.1 HIGH
Network 		openclaw openclaw OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by s… CWE-352
 Origin Validation Error 		CVE-2026-41347 2026-04-29 03:56 2026-04-24 Show GitHub Exploit DB Packet Storm