Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5841	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41374	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5842	4.6	警告 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41398	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5843	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41399	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5844	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41400	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5845	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤って解決された名前や参照の使用に関する脆弱性	CWE-706 誤って解決された名前や参照の使用	CVE-2026-41402	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5846	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41409	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

5847	3.3	低 Local	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-4159	2026-05-1 10:46	2026-03-19	Show	GitHub Exploit DB Packet Storm

5848	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41635	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

5849	3.7	低 Network	OpenClaw	OpenClaw	OpenClawにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-41913	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5850	8.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41914	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347931	-	magnoware	datatrack_system	DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.	CWE-20 Improper Input Validation	CVE-2010-2078	2017-08-17 10:32	2010-05-26	Show	GitHub Exploit DB Packet Storm

347932	-	magnoware	datatrack_system	DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing backslash in a URI, as demonstrated by (1) web.config\ and (2…	CWE-20 Improper Input Validation	CVE-2010-2079	2017-08-17 10:32	2010-05-26	Show	GitHub Exploit DB Packet Storm

347933	-	ibm	communications_server	The npb_protocol_error function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Server for AIX (aka CSAIX or CS/AIX) in sna.rte before 6.3.1.2 allows remote attack…	CWE-20 Improper Input Validation	CVE-2010-2090	2017-08-17 10:32	2010-05-28	Show	GitHub Exploit DB Packet Storm

347934	-	pacifictimesheet	pacific_timesheet	Cross-site request forgery (CSRF) vulnerability in user/user-set.do in Pacific Timesheet 6.74 build 363 allows remote attackers to hijack the authentication of administrators for requests that create…	CWE-352 Origin Validation Error	CVE-2010-2111	2017-08-17 10:32	2010-05-29	Show	GitHub Exploit DB Packet Storm

347935	-	uniformserver	uniformserver	Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1)…	CWE-352 Origin Validation Error	CVE-2010-2113	2017-08-17 10:32	2010-05-29	Show	GitHub Exploit DB Packet Storm

347936	-	speedtech	storm	Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary we…	CWE-79 Cross-site Scripting	CVE-2010-2123	2017-08-17 10:32	2010-06-2	Show	GitHub Exploit DB Packet Storm

347937	-	bartels-schoene	conpresso	SQL injection vulnerability in firma.php in Bartels Schone ConPresso 4.0.7 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-2124	2017-08-17 10:32	2010-06-2	Show	GitHub Exploit DB Packet Storm

347938	-	systemseed	rotor	Multiple cross-site scripting (XSS) vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit…	CWE-79 Cross-site Scripting	CVE-2010-2125	2017-08-17 10:32	2010-06-2	Show	GitHub Exploit DB Packet Storm

347939	-	snipegallery	snipe_gallery	Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfg_admin_path parameter to (1) index.php, (2) view.php…	CWE-94 Code Injection	CVE-2010-2126	2017-08-17 10:32	2010-06-2	Show	GitHub Exploit DB Packet Storm

347940	-	jv2design	jv2_folder_gallery	PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the lang_file parameter.	CWE-94 Code Injection	CVE-2010-2127	2017-08-17 10:32	2010-06-2	Show	GitHub Exploit DB Packet Storm