Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4991	7.3	重要 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41392	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4992	4.8	警告 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41393	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4993	8.2	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41394	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4994	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける暗号化処理の不備に関する脆弱性	CWE-325 暗号化処理の不備	CVE-2026-41395	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4995	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-41396	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4996	9.6	緊急 Network	OpenClaw	OpenClaw	OpenClawにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41397	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4997	4	警告 Local	OpenClaw	OpenClaw	OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-41403	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4998	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41404	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

4999	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41405	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

5000	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-41406	2026-05-7 12:29	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2031	7.5	HIGH Network	-	-	The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the (profile template scope) functi…	CWE-22 Path Traversal	CVE-2026-9290	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2032	4.3	MEDIUM Network	-	-	The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missin…	CWE-352 Origin Validation Error	CVE-2026-9719	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2033	8.8	HIGH Network	-	-	The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without…	CWE-502 Deserialization of Untrusted Data	CVE-2026-7654	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2034	4.3	MEDIUM Network	-	-	The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct Object Reference / Authorization Bypass leading to A…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-10038	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2035	4.9	MEDIUM Network	-	-	The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' parameter in all versions up to, and including, 11.1…	CWE-89 SQL Injection	CVE-2026-6448	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2036	4.3	MEDIUM Network	-	-	The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the funp_…	CWE-352 Origin Validation Error	CVE-2026-7047	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2037	5.3	MEDIUM Network	-	-	The Event Monster – Event Management, Events Calendar, Tickets plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including, 2.1.0. This is du…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-8608	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2038	7.2	HIGH Network	-	-	The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is due to no file type,…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2026-7537	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2039	4.9	MEDIUM Network	-	-	The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Traversal in all versions up to, and including, 4.1.4 via the 'import-user-file' param…	CWE-22 Path Traversal	CVE-2026-7565	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm

2040	5.3	MEDIUM Network	-	-	The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajax_load_mor…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-7665	2026-06-8 23:57	2026-06-6	Show	GitHub Exploit DB Packet Storm