Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3481 7.8 重要
Local 		OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-41295 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3482 8.2 重要
Network 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41296 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3483 7.6 重要
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41297 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3484 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41298 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3485 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存 		CVE-2026-41299 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3486 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全な内部状態の区別に関する脆弱性 CWE-372
不完全な内部状態の区別 		CVE-2026-41300 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3487 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-41301 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3488 6.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41302 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3489 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41303 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
3490 6.5 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-41312 2026-04-30 12:26 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346271 - scripts_for_educators sillysearch Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. NVD-CWE-Other
CVE-2004-2468 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346272 - brickhost phpscheduleit Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations. NVD-CWE-Other
CVE-2004-2469 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346273 - madbms madbms Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins. NVD-CWE-Other
CVE-2004-2470 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346274 - jamesoff quoteengine SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2004-2471 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346275 - agnitum outpost_firewall Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro. NVD-CWE-Other
CVE-2004-2472 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346276 - wmfrog wmfrog wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. CWE-59
Link Following 		CVE-2004-2473 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346277 - phpnews phpnews SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php. NVD-CWE-Other
CVE-2004-2474 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346278 - google toolbar Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest tha… NVD-CWE-Other
CVE-2004-2475 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346279 - diamondcs process_guard_free DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the origi… NVD-CWE-Other
CVE-2004-2477 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346280 - national_science_foundation squid_web_proxy_cache Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer. NVD-CWE-Other
CVE-2004-2480 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm