Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5601	6.7	警告 Local	VMware	Spring Boot	VMwareのSpring Bootにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-40977	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5602	8.8	重要 Network	VMware	Spring AI	VMwareのSpring AIにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-40978	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5603	6.1	警告 Local	VMware	Spring AI	VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40979	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5604	6.5	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40980	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5605	5.3	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41332	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

5606	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-41339	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

5607	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41374	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5608	4.6	警告 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41398	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5609	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41399	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5610	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41400	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1281	9.6	CRITICAL Adjacent	-	-	A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed g…	CWE-59 Link Following	CVE-2026-53476	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1282	9.3	CRITICAL Adjacent	-	-	A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Mid…	CWE-295 Improper Certificate Validation	CVE-2026-53475	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1283	9.6	CRITICAL Network	-	-	A flaw was found in migration-planner. A remote authenticated attacker could exploit this vulnerability by uploading a specially crafted RVTools .xlsx file. Due to improper input sanitization, malici…	CWE-89 SQL Injection	CVE-2026-53474	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1284	7.3	HIGH Network	-	-	A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organizational user click…	CWE-79 Cross-site Scripting	CVE-2026-53473	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1285	9.6	CRITICAL Network	-	-	A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. This flaw allows the attacker…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-53470	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1286	9.1	CRITICAL Network	-	-	A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. T…	CWE-306 Missing Authentication for Critical Function	CVE-2026-53469	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1287	9.9	CRITICAL Network	-	-	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before_request → @jwt_required() (app/rout…	CWE-639 CWE-862 CWE-863 Authorization Bypass Through User-Controlled Key Missing Authorization Incorrect Authorization	CVE-2026-45552	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1288	8.8	HIGH Network	-	-	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes…	CWE-416 Use After Free	CVE-2026-45447	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1289	9.8	CRITICAL Network	-	-	DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.	CWE-78 OS Command	CVE-2026-38615	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1290	9.8	CRITICAL Network	-	-	A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-36721	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed