Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3771 7.4 重要
Network
OpenClaw OpenClaw OpenClawにおける認証時の IP アドレスへの依存に関する脆弱性 CWE-291
認証時の IP アドレスへの依存
CVE-2026-3690 2026-04-30 12:29 2026-04-11 Show GitHub Exploit DB Packet Storm
3772 5.3 警告
Network
OpenClaw OpenClaw OpenClawにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-3691 2026-04-30 12:29 2026-04-11 Show GitHub Exploit DB Packet Storm
3773 7.3 重要
Network
Shenzhen Tenda Technology Co.,Ltd. w30e ファームウェア Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-38834 2026-04-30 12:29 2026-04-21 Show GitHub Exploit DB Packet Storm
3774 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. w30e ファームウェア Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-38835 2026-04-30 12:29 2026-04-21 Show GitHub Exploit DB Packet Storm
3775 5.4 警告
Network
pyLoad pyLoad pyLoadにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-40071 2026-04-30 12:29 2026-04-9 Show GitHub Exploit DB Packet Storm
3776 6.5 警告
Network
getkirby kirby getkirbyのkirbyにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-40099 2026-04-30 12:29 2026-04-24 Show GitHub Exploit DB Packet Storm
3777 5.4 警告
Network
Auth0 Inc. nextjs-auth0 Auth0 Inc.のnextjs-auth0における複数の脆弱性 CWE-362
CWE-863
CVE-2026-40155 2026-04-30 12:29 2026-04-17 Show GitHub Exploit DB Packet Storm
3778 5.5 警告
Local
systemd project systemd systemd projectのsystemdにおける不適切な動作順序に関する脆弱性 CWE-696
不適切な動作順序
CVE-2026-40223 2026-04-30 12:29 2026-04-10 Show GitHub Exploit DB Packet Storm
3779 7.3 重要
Local
systemd project systemd systemd projectのsystemdにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-40224 2026-04-30 12:29 2026-04-10 Show GitHub Exploit DB Packet Storm
3780 6.4 警告
Physics
systemd project systemd systemd projectのsystemdにおける領域間での誤ったリソース移動に関する脆弱性 CWE-669
領域間での誤ったリソース移動
CVE-2026-40225 2026-04-30 12:28 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2041 4.6 MEDIUM
Network
- - RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.2 contain a spreadsheet (CSV/formula) injection vulnerability. User-controlled … CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2026-41073 2026-05-27 05:03 2026-05-23 Show GitHub Exploit DB Packet Storm
2042 8.1 HIGH
Network
- - RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authentication bypass vulnerability in RT installations… CWE-287
Improper Authentication
CVE-2026-41076 2026-05-27 05:03 2026-05-23 Show GitHub Exploit DB Packet Storm
2043 - - - OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions perf… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-40127 2026-05-27 05:00 2026-05-25 Show GitHub Exploit DB Packet Storm
2044 - - - Kenik Camera management Panel is vulnerable to Path Traversal vulnerability. An unauthenticated attacker can send GET request with arbitrary file path and read corresponding files located on the serv… CWE-22
Path Traversal
CVE-2026-7766 2026-05-27 04:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2045 - - - Szafir SDK returns a success status code from the cryptographic digital signature verification process (i.e. /VerifyingTaskItem/Signature/VerificationResult/Result/@code == 0, "Positively verified") … CWE-393
CWE-637
 Return of Wrong Status Code
CVE-2026-9058 2026-05-27 04:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2046 8.8 HIGH
Network
- - A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to buffer overflow. The a… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-9389 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2047 3.1 LOW
Adjacent
- - A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an unknown function of the component Bluetooth Low Energy Handler. Executing a manipulation can lead to w… CWE-521
Weak Password Requirements 
CVE-2026-9394 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2048 3.5 LOW
Adjacent
- - A vulnerability was identified in Besen BS20 EV Charging Station up to 20260426. Affected is an unknown function of the component BLE/UDP. The manipulation leads to insufficiently protected credentia… CWE-522
 Insufficiently Protected Credentials
CVE-2026-9395 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2049 3.7 LOW
Network
- - A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulat… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2026-9396 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2050 8.1 HIGH
Network
- - A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown functionality of the component OTA Update Installation Handler. This manipulati… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-9397 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm