Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3211	2.4	低 Physics	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2024-54556	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

3212	6.1	警告 Network	wpwebelite	WooCommerce PDF Vouchers	WPWeb EliteのWordPress用WooCommerce PDF Vouchersにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-56265	2026-01-29 16:01	2024-12-31	Show	GitHub Exploit DB Packet Storm

3213	9.8	緊急 Network	Imagination Technologies Limited	GPU DDK	Imagination Technologies LimitedのGPU DDKにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-13952	2026-01-29 16:01	2026-01-24	Show	GitHub Exploit DB Packet Storm

3214	6.3	警告 Local	Haxx	cURL	HaxxのcURLにおける不特定の脆弱性	CWE-Other その他	CVE-2025-14017	2026-01-29 16:01	2026-01-8	Show	GitHub Exploit DB Packet Storm

3215	5.3	警告 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2025-24089	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

3216	3.3	低 Local	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における複数の脆弱性	CWE-200 CWE-284	CVE-2025-24090	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

3217	7.3	重要 Network	Apache Software Foundation	Apache Hadoop	Apache Software FoundationのApache Hadoopにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2025-27821	2026-01-29 16:01	2026-01-26	Show	GitHub Exploit DB Packet Storm

3218	7.5	重要 Network	Apache Software Foundation	Linkis	Apache Software FoundationのLinkisにおける複数の脆弱性	CWE-20 CWE-22	CVE-2025-29847	2026-01-29 16:01	2026-01-19	Show	GitHub Exploit DB Packet Storm

3219	3.3	低 Local	アップル	Xcode	アップルのXcodeにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-31186	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

3220	4.3	警告 Network	webinarpress	webinarpress	WordPress用webinarpressにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-31882	2026-01-29 16:01	2025-04-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
121	6.5	MEDIUM Network	-	-	OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive unredacted secrets through sourceConfig and runtimeConfig alias fields. Attack… New	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2026-43528	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

122	7.7	HIGH Network	-	-	OpenClaw before 2026.4.14 contains a server-side request forgery vulnerability in browser SSRF policy that allows private-network navigation by default. Attackers can exploit this misconfiguration to… New	CWE-918 CWE-1188 Server-Side Request Forgery (SSRF) Insecure Default Initialization of Resource	CVE-2026-43527	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

123	8.2	HIGH Network	-	-	OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by provid… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-43526	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

124	8.5	HIGH Network	-	-	OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attackers can bypass configured browser SSRF policy pr… New	CWE-862 Missing Authorization	CVE-2026-42439	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

125	7.7	HIGH Network	-	-	OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file disclosure. Attackers wi… New	CWE-863 Incorrect Authorization	CVE-2026-42438	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

126	7.5	HIGH Network	-	-	OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attacke… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-42437	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

127	7.7	HIGH Network	-	-	OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the final browser target after navigatio… New	CWE-862 Missing Authorization	CVE-2026-42436	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

128	8.8	HIGH Network	-	-	OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to inject environment variable assignments at the argv level. Attack… New	CWE-184 Incomplete Blacklist	CVE-2026-42435	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

129	8.8	HIGH Network	-	-	OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass sandbox boundaries … New	CWE-863 Incorrect Authorization	CVE-2026-42434	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

130	6.5	MEDIUM Network	-	-	OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can… New	CWE-862 Missing Authorization	CVE-2026-42433	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm