Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5291	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41635	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

5292	3.7	低 Network	OpenClaw	OpenClaw	OpenClawにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-41913	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5293	8.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41914	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5294	6.1	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41915	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5295	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-41916	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5296	6.5	警告 Network	Technitium	DNS Server	TechnitiumのDNS Serverにおける指定された機能の不適切な提供に関する脆弱性	CWE-684 指定された機能の不適切な提供	CVE-2026-42255	2026-05-1 10:46	2026-04-26	Show	GitHub Exploit DB Packet Storm

5297	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-42420	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5298	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-42421	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5299	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-42422	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5300	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける安全でない失敗処理に関する脆弱性	CWE-636 安全でない失敗処理	CVE-2026-42423	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1631	8.2	HIGH Network	-	-	Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parame…	CWE-89 SQL Injection	CVE-2017-20245	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1632	8.2	HIGH Network	-	-	KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can i…	CWE-89 SQL Injection	CVE-2017-20246	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1633	8.2	HIGH Network	-	-	WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid para…	CWE-89 SQL Injection	CVE-2017-20247	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1634	7.5	HIGH Network	-	-	Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests …	CWE-22 Path Traversal	CVE-2017-20248	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1635	8.2	HIGH Network	-	-	Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attac…	CWE-89 SQL Injection	CVE-2017-20249	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1636	7.5	HIGH Network	-	-	Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to mac…	CWE-22 Path Traversal	CVE-2017-20250	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1637	9.8	CRITICAL Network	-	-	WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes thro…	CWE-94 Code Injection	CVE-2017-20251	2026-06-9 22:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1638	7.8	HIGH Local	-	-	A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inse…	CWE-74 CWE-94 CWE-116 Injection Code Injection Improper Encoding or Escaping of Output	CVE-2026-8795	2026-06-9 22:49	2026-06-9	Show	GitHub Exploit DB Packet Storm

1639	7.5	HIGH Network	-	-	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 th…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40983	2026-06-9 22:49	2026-06-9	Show	GitHub Exploit DB Packet Storm

1640	7.5	HIGH Network	-	-	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40984	2026-06-9 22:49	2026-06-9	Show	GitHub Exploit DB Packet Storm