Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256711 6.4 警告 Opera Software ASA - Opera における Web スクリプトを含むページの URL をアドレスフィールドに表示される脆弱性 CWE-20
不適切な入力確認
CVE-2008-4200 2010-09-27 16:04 2008-09-27 Show GitHub Exploit DB Packet Storm
256712 5 警告 Opera Software ASA - Opera におけるローカルファイル名の有効性を判別される脆弱性 CWE-200
情報漏えい
CVE-2008-4199 2010-09-27 16:04 2008-09-27 Show GitHub Exploit DB Packet Storm
256713 7.5 危険 Opera Software ASA - Opera における http ページ上で危険な操作を実行させられる脆弱性 CWE-Other
その他
CVE-2008-4198 2010-09-27 16:03 2008-09-27 Show GitHub Exploit DB Packet Storm
256714 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2008-4197 2010-09-27 16:03 2008-09-27 Show GitHub Exploit DB Packet Storm
256715 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4196 2010-09-27 16:02 2008-09-27 Show GitHub Exploit DB Packet Storm
256716 5 警告 Opera Software ASA - Opera における任意のアドレスの表示を誘発させられる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-4195 2010-09-27 16:02 2008-09-27 Show GitHub Exploit DB Packet Storm
256717 6.8 警告 Opera Software ASA - Opera における HTTP セッションハイジャックの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-3172 2010-09-27 16:01 2008-07-14 Show GitHub Exploit DB Packet Storm
256718 10 危険 Opera Software ASA - Windows 上で稼働する Opera における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2008-3079 2010-09-27 16:01 2008-07-9 Show GitHub Exploit DB Packet Storm
256719 7.8 危険 Opera Software ASA - Opera における初期化されていないメモリコンテンツを読まれる脆弱性 CWE-200
情報漏えい
CVE-2008-3078 2010-09-27 16:01 2008-07-9 Show GitHub Exploit DB Packet Storm
256720 5 警告 Opera Software ASA - Opera における信頼されたフレームのコンテンツを偽装される脆弱性 CWE-DesignError
CVE-2008-2716 2010-09-27 16:00 2008-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
6311 5.0 MEDIUM
Local
openclaw openclaw OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access can redirect runtime… CWE-441
Confused Deputy
CVE-2026-45003 2026-05-13 23:13 2026-05-12 Show GitHub Exploit DB Packet Storm
6312 5.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction. Attackers can render externally inf… CWE-863
 Incorrect Authorization
CVE-2026-45002 2026-05-13 23:13 2026-05-12 Show GitHub Exploit DB Packet Storm
6313 7.1 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox p… CWE-862
 Missing Authorization
CVE-2026-45001 2026-05-13 23:13 2026-05-12 Show GitHub Exploit DB Packet Storm
6314 5.0 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45000 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
6315 5.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events. Attacke… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-44999 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
6316 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.20 contains a tool policy bypass vulnerability allowing bundled MCP and LSP tools to circumvent configured tool restrictions. Attackers with local agent access can append restr… CWE-863
 Incorrect Authorization
CVE-2026-44998 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
6317 4.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit depth, child-count limits, contro… CWE-266
 Incorrect Privilege Assignment
CVE-2026-44997 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
6318 3.7 LOW
Network
openclaw openclaw OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks. Attackers can influence ag… CWE-22
Path Traversal
CVE-2026-44996 2026-05-13 23:12 2026-05-12 Show GitHub Exploit DB Packet Storm
6319 7.3 HIGH
Local
openclaw openclaw OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Malicious workspace con… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-44995 2026-05-13 23:11 2026-05-12 Show GitHub Exploit DB Packet Storm
6320 5.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.22 contains an authentication bypass vulnerability in the Control UI bootstrap config endpoint that allows unauthenticated attackers to read sensitive configuration fields. Att… CWE-862
 Missing Authorization
CVE-2026-44994 2026-05-13 23:11 2026-05-12 Show GitHub Exploit DB Packet Storm