Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5831	7	重要 Local	VMware	Spring Boot	VMwareのSpring Bootにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40973	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5832	7.5	重要 Network	VMware	Spring Boot	VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2026-40975	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5833	9.1	緊急 Network	VMware	Spring Boot	VMwareのSpring Bootにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-40976	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5834	6.7	警告 Local	VMware	Spring Boot	VMwareのSpring Bootにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-40977	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5835	8.8	重要 Network	VMware	Spring AI	VMwareのSpring AIにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-40978	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5836	6.1	警告 Local	VMware	Spring AI	VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40979	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5837	6.5	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40980	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5838	5.3	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41332	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

5839	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-41339	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

5840	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41374	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1111	7.7	HIGH Network	-	-	OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act in…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-53812	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1112	7.8	HIGH Local	-	-	OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with access to affected wor…	CWE-427 Uncontrolled Search Path Element	CVE-2026-53813	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1113	8.3	HIGH Network	-	-	OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. Atta…	CWE-266 Incorrect Privilege Assignment	CVE-2026-53814	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1114	6.5	MEDIUM Network	-	-	OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust callers can request messages from channels not intend…	CWE-862 Missing Authorization	CVE-2026-53815	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1115	7.2	HIGH Network	-	-	OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system.run authorization.…	CWE-862 Missing Authorization	CVE-2026-53816	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1116	8.8	HIGH Network	-	-	OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to spoof locality information and obtain durable admin-capable d…	CWE-290 Authentication Bypass by Spoofing	CVE-2026-53817	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1117	6.6	MEDIUM Local	-	-	OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attacke…	CWE-862 Missing Authorization	CVE-2026-53818	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1118	8.8	HIGH Network	-	-	OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attackers with access to…	CWE-426 Untrusted Search Path	CVE-2026-53819	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1119	8.8	HIGH Network	microsoft	sharepoint_server	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.	CWE-502 Deserialization of Untrusted Data	CVE-2026-45484	2026-06-13 00:57	2026-06-10	Show	GitHub Exploit DB Packet Storm

1120	3.5	LOW Network	-	-	The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…	-	CVE-2026-9269	2026-06-13 00:57	2026-06-12	Show	GitHub Exploit DB Packet Storm