Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4341 7.5 重要
Network
VMware Spring Boot VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用
CVE-2026-40975 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
4342 9.1 緊急
Network
VMware Spring Boot VMwareのSpring Bootにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-40976 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
4343 6.7 警告
Local
VMware Spring Boot VMwareのSpring Bootにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-40977 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
4344 8.8 重要
Network
VMware Spring AI VMwareのSpring AIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-40978 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
4345 6.1 警告
Local
VMware Spring AI VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル
CVE-2026-40979 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
4346 6.5 警告
Network
VMware Spring AI VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-40980 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
4347 5.3 警告
Local
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-41332 2026-05-1 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
4348 4.3 警告
Network
OpenClaw OpenClaw OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい
CVE-2026-41339 2026-05-1 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
4349 5.3 警告
Network
OpenClaw OpenClaw OpenClawにおける不適切な動作順序(早期増幅)に関する脆弱性 CWE-408
不適切な動作順序(早期増幅)
CVE-2026-41374 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
4350 4.6 警告
Adjacent
OpenClaw OpenClaw OpenClawにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-41398 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2171 6.3 MEDIUM
Network
- - A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10177 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2172 7.3 HIGH
Network
- - A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminEditAlbum.php. The manipulation of the argument ID res… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10178 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2173 8.8 HIGH
Network
- - A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument webpage causes stack… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10179 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2174 6.3 MEDIUM
Network
- - A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the argument sysCmd leads to command injection.… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-10180 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2175 7.3 HIGH
Network
- - A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of th… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10184 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2176 7.3 HIGH
Network
- - A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argum… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10185 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2177 8.8 HIGH
Network
- - A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument submit-url results … CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10181 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2178 6.3 MEDIUM
Network
- - A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee … CWE-74
CWE-77
Injection
Command Injection
CVE-2026-10182 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2179 8.8 HIGH
Network
- - A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument enrollee leads to stack-base… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10183 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2180 7.3 HIGH
Network
- - A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patient.php. Such manipulati… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10186 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm