Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5851	6.1	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41915	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5852	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-41916	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5853	6.5	警告 Network	Technitium	DNS Server	TechnitiumのDNS Serverにおける指定された機能の不適切な提供に関する脆弱性	CWE-684 指定された機能の不適切な提供	CVE-2026-42255	2026-05-1 10:46	2026-04-26	Show	GitHub Exploit DB Packet Storm

5854	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-42420	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5855	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-42421	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5856	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-42422	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5857	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける安全でない失敗処理に関する脆弱性	CWE-636 安全でない失敗処理	CVE-2026-42423	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5858	5	警告 Local	OpenClaw	OpenClaw	OpenClawにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-42424	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5859	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-42426	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

5860	5.3	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-42427	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1491	7.1	HIGH Local	-	-	A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey …	CWE-362 Race Condition	CVE-2022-26758	2026-06-11 23:43	2026-06-11	Show	GitHub Exploit DB Packet Storm

1492	3.5	LOW Physics	-	-	A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4.	CWE-287 Improper Authentication	CVE-2022-48575	2026-06-11 23:43	2026-06-11	Show	GitHub Exploit DB Packet Storm

1493	5.3	MEDIUM Local	-	-	Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of …	CWE-20 Improper Input Validation	CVE-2024-21944	2026-06-11 23:43	2026-06-11	Show	GitHub Exploit DB Packet Storm

1494	3.7	LOW Network	-	-	A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCookie of the file security/oidc.go of the component OIDC Session Cookie Handler. Executing a manipulation can …	CWE-614 CWE-1004 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute Sensitive Cookie Without 'HttpOnly' Flag	CVE-2026-11956	2026-06-11 23:42	2026-06-11	Show	GitHub Exploit DB Packet Storm

1495	4.7	MEDIUM Network	-	-	The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter in versions up to, and including, 1.4.31 due to insufficient inpu…	CWE-79 Cross-site Scripting	CVE-2026-2827	2026-06-11 23:42	2026-06-11	Show	GitHub Exploit DB Packet Storm

1496	8.1	HIGH Network	-	-	The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.26.4 via the UpdraftPlus_Remote_Communications_V2::wp…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-10795	2026-06-11 23:42	2026-06-11	Show	GitHub Exploit DB Packet Storm

1497	7.1	HIGH Network	-	-	Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2.	CWE-79 Cross-site Scripting	CVE-2023-33999	2026-06-11 23:42	2026-06-11	Show	GitHub Exploit DB Packet Storm

1498	5.3	MEDIUM Network	-	-	Authorization bypass through User-Controlled key vulnerability in Essential Plugin WP Logo Showcase Responsive Slider and Carousel allows Exploiting Incorrectly Configured Access Control Security Lev…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2023-40200	2026-06-11 23:42	2026-06-11	Show	GitHub Exploit DB Packet Storm

1499	4.3	MEDIUM Network	-	-	Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This issue affects WpEvently: from n/a through 4.1.2.	CWE-352 Origin Validation Error	CVE-2024-32110	2026-06-11 23:42	2026-06-11	Show	GitHub Exploit DB Packet Storm

1500	5.4	MEDIUM Network	-	-	Missing Authorization vulnerability in TemplateHouse Soledad allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Soledad: from n/a through 8.2.5.	CWE-862 Missing Authorization	CVE-2022-42479	2026-06-11 23:42	2026-06-11	Show	GitHub Exploit DB Packet Storm