Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5091 7.8 重要
Local 		OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-41336 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5092 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41337 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5093 5 警告
Local 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41338 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5094 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全な内部状態の区別に関する脆弱性 CWE-372
不完全な内部状態の区別 		CVE-2026-41340 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5095 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不十分な型の区別に関する脆弱性 CWE-351
不十分な型の区別 		CVE-2026-41341 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5096 8.1 重要
Adjacent 		OpenClaw OpenClaw OpenClawにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-41342 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5097 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41343 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5098 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41344 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5099 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-41345 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5100 7.5 重要
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41346 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1091 4.3 MEDIUM
Network 		- - A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function TeamTasksTool.executeComplete of the file internal/tools/team_tasks_lifecycle.go of the co… CWE-862
CWE-863
 Missing Authorization
 Incorrect Authorization 		CVE-2026-10616 2026-06-4 23:56 2026-06-3 Show GitHub Exploit DB Packet Storm
1092 7.3 HIGH
Network 		- - A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handl… CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-10617 2026-06-4 23:56 2026-06-3 Show GitHub Exploit DB Packet Storm
1093 4.3 MEDIUM
Network 		- - A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Impacted is the function Open of the file src/blender_mcp/server.py. The manipulation of the arg… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure 		CVE-2026-10661 2026-06-4 23:56 2026-06-3 Show GitHub Exploit DB Packet Storm
1094 6.3 MEDIUM
Network 		- - A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blender_mcp/server.py of the compon… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-10662 2026-06-4 23:56 2026-06-3 Show GitHub Exploit DB Packet Storm
1095 5.5 MEDIUM
Network 		- - A vulnerability was determined in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The impacted element is the function execute_blender_code of the file /src/blender_mcp/server.py… CWE-74
CWE-94
Injection
Code Injection 		CVE-2026-10688 2026-06-4 23:56 2026-06-3 Show GitHub Exploit DB Packet Storm
1096 6.3 MEDIUM
Network 		- - A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /manage_student.php. The manipulation of the argument ID leads to sql injection… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10808 2026-06-4 23:41 2026-06-4 Show GitHub Exploit DB Packet Storm
1097 6.3 MEDIUM
Network 		- - A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manage_user.php. The manipulation of the argument ID results in sql injec… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10809 2026-06-4 23:41 2026-06-4 Show GitHub Exploit DB Packet Storm
1098 4.3 MEDIUM
Network 		- - A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scri… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-10810 2026-06-4 23:41 2026-06-4 Show GitHub Exploit DB Packet Storm
1099 6.3 MEDIUM
Network 		- - A vulnerability was found in mjperpinosa stumasy. The affected element is an unknown function of the file application/PHP/objects/updates/add_post.php. Performing a manipulation of the argument up_fi… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-10806 2026-06-4 23:41 2026-06-4 Show GitHub Exploit DB Packet Storm
1100 6.3 MEDIUM
Network 		- - A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/change_profile_image.php. Executing a manipulation of t… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-10807 2026-06-4 23:41 2026-06-4 Show GitHub Exploit DB Packet Storm