Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4811	6.1	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41915	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4812	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-41916	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4813	6.5	警告 Network	Technitium	DNS Server	TechnitiumのDNS Serverにおける指定された機能の不適切な提供に関する脆弱性	CWE-684 指定された機能の不適切な提供	CVE-2026-42255	2026-05-1 10:46	2026-04-26	Show	GitHub Exploit DB Packet Storm

4814	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-42420	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4815	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-42421	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4816	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-42422	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4817	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける安全でない失敗処理に関する脆弱性	CWE-636 安全でない失敗処理	CVE-2026-42423	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4818	5	警告 Local	OpenClaw	OpenClaw	OpenClawにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-42424	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4819	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-42426	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

4820	5.3	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-42427	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1821	5.9	MEDIUM Adjacent	-	-	Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 contains hardcoded WiFi driver credentials including a RADIUS shared secret, WPS test key, and default PSK embedded in the production firmware…	CWE-798 CWE-1188 Use of Hard-coded Credentials Insecure Default Initialization of Resource	CVE-2026-36616	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

1822	4.3	MEDIUM Adjacent	-	-	Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aiding targeted attacks against kno…	CWE-200 Information Exposure	CVE-2026-36618	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

1823	-		-	-	FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster parameters in HTML output, bypassing the `hid…	CWE-200 Information Exposure	CVE-2026-40495	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

1824	-		-	-	FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Redirect module does not validate the URL scheme of administrator-configured destination URLs befo…	CWE-601 Open Redirect	CVE-2026-43924	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

1825	-		-	-	FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the password reset confirmation endpoint `/client/reset-password-confirm/:hash` is handled by a non-AP…	CWE-204 CWE-307 Response Discrepancy Information Exposure mproper Restriction of Excessive Authentication Attempts	CVE-2026-43926	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

1826	7.4	HIGH Local	-	-	A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox can be escaped through a malformed JAR file.	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2025-64390	2026-06-5 00:35	2026-06-3	Show	GitHub Exploit DB Packet Storm

1827	-		-	-	Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds for very large defe…	CWE-787 Out-of-bounds Write	CVE-2026-10717	2026-06-5 00:35	2026-06-3	Show	GitHub Exploit DB Packet Storm

1828	-		-	-	Out of bounds write in openSeaChest’s Trim/Unmap operation in Seagate’s openSeaChest v26.03.0 on all supported platforms allows for writing extra memory describing a range of LBAs to deallocate 16 by…	CWE-787 Out-of-bounds Write	CVE-2026-10718	2026-06-5 00:35	2026-06-3	Show	GitHub Exploit DB Packet Storm

1829	-		-	-	Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing 1 extra byte outside of allocated memory which sets a val…	CWE-787 Out-of-bounds Write	CVE-2026-10719	2026-06-5 00:35	2026-06-3	Show	GitHub Exploit DB Packet Storm

1830	7.8	HIGH Local	-	-	An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users t…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2022-49036	2026-06-5 00:35	2026-06-3	Show	GitHub Exploit DB Packet Storm