Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 12:07 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3871 5.3 警告
Network
OpenClaw OpenClaw OpenClawにおけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避
CVE-2026-41351 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3872 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-41352 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3873 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-41356 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3874 3.3
Local
OpenClaw OpenClaw OpenClawにおける重要な情報を使用しているプロセスの呼び出しに関する脆弱性 CWE-214
重要な情報を使用しているプロセスの呼び出し
CVE-2026-41357 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3875 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-41359 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3876 7.1 重要
Network
OpenClaw OpenClaw OpenClawにおける複数の脆弱性 CWE-184
CWE-918
CVE-2026-41361 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3877 4.3 警告
Network
OpenClaw OpenClaw OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2026-41362 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3878 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-41363 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3879 8.1 重要
Network
OpenClaw OpenClaw OpenClawにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-41364 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3880 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-41365 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347031 - microsoft data_access_components Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details … NVD-CWE-Other
CVE-2002-1918 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347032 - aquonics_scripting aquonics_file_manager Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file. NVD-CWE-Other
CVE-2002-1927 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347033 - qnx rtos The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick. NVD-CWE-Other
CVE-2002-1983 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347034 - zonelabs zonealarm ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension. NVD-CWE-Other
CVE-2002-1997 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347035 - xqus x-stat x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which lea… NVD-CWE-Other
CVE-2002-2045 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347036 - squirrelmail squirrelmail Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) "<<script" in unspecified input fie… NVD-CWE-Other
CVE-2002-2086 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347037 - gianni_tedesco fwmon Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a large packet. NVD-CWE-Other
CVE-2002-2111 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347038 - netjuke netjuke Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, which is passed to an eval call. NVD-CWE-Other
CVE-2002-2114 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347039 - gallery_project gallery PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERY_BASEDIR pa… NVD-CWE-Other
CVE-2002-2123 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
347040 - nylon nylon The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closin… NVD-CWE-Other
CVE-2002-2124 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm