Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253941 5 警告 ISC, Inc.
ターボリナックス		 - ISC DHCP にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3616 2011-06-10 10:04 2010-12-14 Show GitHub Exploit DB Packet Storm
253942 7.2 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の do_anonymous_page 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2240 2011-06-10 10:03 2010-08-30 Show GitHub Exploit DB Packet Storm
253943 7.2 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の gdth_read_event 関数における権限昇格の脆弱性 CWE-Other
その他 		CVE-2009-3080 2011-06-10 10:03 2009-11-20 Show GitHub Exploit DB Packet Storm
253944 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の net/ipv4/tcp_input.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1188 2011-06-10 10:02 2010-03-30 Show GitHub Exploit DB Packet Storm
253945 7.8 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の e1000 ドライバにおけるパケットフィルタの制限を回避される脆弱性 CWE-189
数値処理の問題 		CVE-2009-4536 2011-06-10 10:02 2010-01-12 Show GitHub Exploit DB Packet Storm
253946 9.3 危険 Google - Google Chrome にて使用される WebKit の WebCore における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1772 2011-06-10 09:57 2010-06-8 Show GitHub Exploit DB Packet Storm
253947 6.8 警告 Google - Google Chrome にて使用される WebKit の WebCore におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-1767 2011-06-10 09:57 2010-04-20 Show GitHub Exploit DB Packet Storm
253948 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4199 2011-06-10 09:56 2010-11-4 Show GitHub Exploit DB Packet Storm
253949 9.3 危険 Google
レッドハット		 - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4198 2011-06-10 09:56 2010-11-4 Show GitHub Exploit DB Packet Storm
253950 9.3 危険 Google
レッドハット		 - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4197 2011-06-10 09:55 2010-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5501 5.5 MEDIUM
Local 		openclaw openclaw OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper me… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-41366 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
5502 5.0 MEDIUM
Network 		openclaw openclaw OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component action… CWE-863
 Incorrect Authorization 		CVE-2026-41367 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
5503 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin restrictions by using … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2026-41368 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
5504 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override variables. Attackers… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2026-41369 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
5505 8.5 HIGH
Network 		openclaw openclaw OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate targ… CWE-863
 Incorrect Authorization 		CVE-2026-41371 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
5506 5.8 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections. Attackers can craft hostile discovery responses re… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-41372 2026-04-29 03:43 2026-04-28 Show GitHub Exploit DB Packet Storm
5507 8.8 HIGH
Network 		jpcert logontracer An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user. CWE-78
OS Command  		CVE-2026-33277 2026-04-29 03:43 2026-04-27 Show GitHub Exploit DB Packet Storm
5508 7.4 HIGH
Network 		apache thrift Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixe… CWE-297
CWE-306
 Improper Validation of Certificate with Host Mismatch
Missing Authentication for Critical Function 		CVE-2026-41603 2026-04-29 03:42 2026-04-28 Show GitHub Exploit DB Packet Storm
5509 5.4 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API. Attackers can retrieve thread messages that should be filtered by sender a… CWE-441
Confused Deputy 		CVE-2026-41365 2026-04-29 03:41 2026-04-28 Show GitHub Exploit DB Packet Storm
5510 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths. Remote attackers can … CWE-22
Path Traversal 		CVE-2026-41370 2026-04-29 03:41 2026-04-28 Show GitHub Exploit DB Packet Storm