Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3701	3.3	低 Local	OpenClaw	OpenClaw	OpenClawにおける重要な情報を使用しているプロセスの呼び出しに関する脆弱性	CWE-214 重要な情報を使用しているプロセスの呼び出し	CVE-2026-41357	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

3702	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-41359	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

3703	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおける複数の脆弱性	CWE-184 CWE-918	CVE-2026-41361	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

3704	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-41362	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3705	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41363	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3706	8.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41364	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3707	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるフィルタリングの回避に関する脆弱性	CWE-441 フィルタリング回避	CVE-2026-41365	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3708	5.5	警告 Local	OpenClaw	OpenClaw	OpenClawにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-41366	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3709	5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41367	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3710	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-41368	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1531	9.8	CRITICAL Network	-	-	The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. When starting a model server with the ludwig serve command, the framework loads mo…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31238	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1532	9.8	CRITICAL Network	-	-	The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, the framework auto…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31237	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1533	9.8	CRITICAL Network	-	-	The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function def…	CWE-94 Code Injection	CVE-2026-31236	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1534	9.8	CRITICAL Network	-	-	The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize …	CWE-502 Deserialization of Untrusted Data	CVE-2026-31235	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1535	9.8	CRITICAL Network	-	-	Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. The KVStore server, used for distributed task coordination, lacks authentication…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31234	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1536	9.8	CRITICAL Network	-	-	Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. When installing validator packages via guardrails hub install, the system retrieve…	CWE-94 Code Injection	CVE-2026-31233	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1537	8.8	HIGH Network	-	-	The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading process. When loading model f…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31232	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1538	-		-	-	Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @clerk/backend, and other…	CWE-754 CWE-863 Improper Check for Unusual or Exceptional Conditions Incorrect Authorization	CVE-2026-42349	2026-05-15 04:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

1539	7.5	HIGH Network	apache	tomcat	Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 t…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-41284	2026-05-15 03:59	2026-05-13	Show	GitHub Exploit DB Packet Storm

1540	7.3	HIGH Network	mozilla	firefox	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3.	CWE-416 Use After Free	CVE-2026-8390	2026-05-15 03:53	2026-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed