Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3291	9.1	緊急 Network	Sick	Field Analytics	SickのField Analyticsにおける暗号アルゴリズムの使用に関する脆弱性	CWE-327 不完全、または危険な暗号アルゴリズムの使用	CVE-2025-49196	2026-01-28 12:42	2025-06-12	Show	GitHub Exploit DB Packet Storm

3292	7.5	重要 Network	firefly	media server	SickのMedia Serverにおける弱いハッシュの使用に関する脆弱性	CWE-328 脆弱なハッシュの使用	CVE-2025-49197	2026-01-28 12:42	2025-06-12	Show	GitHub Exploit DB Packet Storm

3293	7.5	重要 Network	firefly	media server	SickのMedia Serverにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2025-49198	2026-01-28 12:42	2025-06-12	Show	GitHub Exploit DB Packet Storm

3294	9.8	緊急 Network	Sick	Field Analytics	SickのField Analyticsにおけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2025-49199	2026-01-28 12:42	2025-06-12	Show	GitHub Exploit DB Packet Storm

3295	7.5	重要 Network	Sick	Field Analytics	SickのField Analyticsにおける情報漏えいに関する脆弱性	CWE-200 CWE-noinfo	CVE-2025-49200	2026-01-28 12:42	2025-06-12	Show	GitHub Exploit DB Packet Storm

3296	9.6	緊急 Network	ジュニパーネットワークス	Security Director	ジュニパーネットワークスのSecurity Directorにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-52950	2026-01-28 12:41	2025-07-11	Show	GitHub Exploit DB Packet Storm

3297	6.1	警告 Network	ジュニパーネットワークス	Juniper Paragon Automation	ジュニパーネットワークスのJuniper Paragon Automationにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2025-52987	2026-01-28 12:41	2026-01-15	Show	GitHub Exploit DB Packet Storm

3298	8.8	重要 Network	Ruijie Networks	M18 EW ファームウェア RG-EW3000GX PRO Firmware	Ruijie NetworksのM18 EW ファームウェア等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-56089	2026-01-28 12:41	2025-12-11	Show	GitHub Exploit DB Packet Storm

3299	8.8	重要 Network	Ruijie Networks	X30 Pro ファームウェア RG-EAP602 Firmware rg-ew300 pro ファームウェア	Ruijie NetworksのRG-EAP602 Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-56093	2026-01-28 12:41	2025-12-11	Show	GitHub Exploit DB Packet Storm

3300	8.8	重要 Network	Ruijie Networks	RG-EAP602 Firmware rg-ew1200g pro ファームウェア	Ruijie NetworksのRG-EAP602 Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-56095	2026-01-28 12:41	2025-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
121	6.5	MEDIUM Network	-	-	OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive unredacted secrets through sourceConfig and runtimeConfig alias fields. Attack… New	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2026-43528	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

122	7.7	HIGH Network	-	-	OpenClaw before 2026.4.14 contains a server-side request forgery vulnerability in browser SSRF policy that allows private-network navigation by default. Attackers can exploit this misconfiguration to… New	CWE-918 CWE-1188 Server-Side Request Forgery (SSRF) Insecure Default Initialization of Resource	CVE-2026-43527	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

123	8.2	HIGH Network	-	-	OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by provid… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-43526	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

124	8.5	HIGH Network	-	-	OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attackers can bypass configured browser SSRF policy pr… New	CWE-862 Missing Authorization	CVE-2026-42439	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

125	7.7	HIGH Network	-	-	OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file disclosure. Attackers wi… New	CWE-863 Incorrect Authorization	CVE-2026-42438	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

126	7.5	HIGH Network	-	-	OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attacke… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-42437	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

127	7.7	HIGH Network	-	-	OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the final browser target after navigatio… New	CWE-862 Missing Authorization	CVE-2026-42436	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

128	8.8	HIGH Network	-	-	OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to inject environment variable assignments at the argv level. Attack… New	CWE-184 Incomplete Blacklist	CVE-2026-42435	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

129	8.8	HIGH Network	-	-	OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass sandbox boundaries … New	CWE-863 Incorrect Authorization	CVE-2026-42434	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

130	6.5	MEDIUM Network	-	-	OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can… New	CWE-862 Missing Authorization	CVE-2026-42433	2026-05-5 21:16	2026-05-5	Show	GitHub Exploit DB Packet Storm