Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4531	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける保存または転送前の重要な情報の削除に関する脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-43528	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4532	2.5	低 Local	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-43529	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4533	7.7	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-43532	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4534	8.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-43533	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4535	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2026-43534	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4536	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-43566	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4537	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43567	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4538	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43568	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4539	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-43569	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4540	7.5	重要 Network	Apache Software Foundation	Apache Wicket	Apache Software FoundationのApache Wicketにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-43646	2026-05-8 12:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2321	7.1	HIGH Network	-	-	LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.7.6, an Insecure Direct Object Reference (IDOR) vulnerability exists in the API keys mana…	CWE-862 Missing Authorization	CVE-2026-31942	2026-06-5 00:48	2026-06-3	Show	GitHub Exploit DB Packet Storm

2322	9.6	CRITICAL Network	-	-	LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR} placeholders aga…	CWE-200 Information Exposure	CVE-2026-32625	2026-06-5 00:48	2026-06-3	Show	GitHub Exploit DB Packet Storm

2323	6.5	MEDIUM Network	-	-	LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users with only `VIEW` access to an MCP server can retrieve the server's decrypted a…	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2026-44653	2026-06-5 00:48	2026-06-3	Show	GitHub Exploit DB Packet Storm

2324	-		-	-	LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the o…	CWE-863 Incorrect Authorization	CVE-2026-44654	2026-06-5 00:48	2026-06-3	Show	GitHub Exploit DB Packet Storm

2325	-		-	-	Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.	CWE-259 Use of Hard-coded Password	CVE-2026-22054	2026-06-5 00:48	2026-06-4	Show	GitHub Exploit DB Packet Storm

2326	-		-	-	Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.	CWE-259 Use of Hard-coded Password	CVE-2026-22055	2026-06-5 00:48	2026-06-4	Show	GitHub Exploit DB Packet Storm

2327	-		-	-	In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server level changes using a certain API endpoint despite receivi…	CWE-862 Missing Authorization	CVE-2026-4881	2026-06-5 00:48	2026-06-4	Show	GitHub Exploit DB Packet Storm

2328	7.5	HIGH Network	-	-	React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportio…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-42342	2026-06-5 00:43	2026-06-3	Show	GitHub Exploit DB Packet Storm

2329	-		-	-	Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies. When Tesla.Middleware.…	CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)	CVE-2026-48594	2026-06-5 00:42	2026-06-3	Show	GitHub Exploit DB Packet Storm

2330	-		-	-	Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects. Tesla.Middleware.FollowRedirects strips securit…	CWE-178 Improper Handling of Case Sensitivity	CVE-2026-48595	2026-06-5 00:42	2026-06-3	Show	GitHub Exploit DB Packet Storm