Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6031	8.1	重要 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41342	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

6032	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるインタラクション頻度の制御に関する脆弱性	CWE-799 インタラクション頻度の不適切な制御	CVE-2026-41343	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

6033	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41344	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

6034	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-41345	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

6035	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるインタラクション頻度の制御に関する脆弱性	CWE-799 インタラクション頻度の不適切な制御	CVE-2026-41346	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

6036	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-41347	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

6037	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41348	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

6038	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41349	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

6039	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41350	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

6040	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるCapture-replay による認証回避に関する脆弱性	CWE-294 Capture-replayによる認証回避	CVE-2026-41351	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
81	9.1	CRITICAL Network	-	-	ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, `apos.util.set()` traverses dot-notation paths without sanitizing `__proto__`, allowing an a… New	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2026-53609	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

82	8.7	HIGH Network	-	-	ApostropheCMS is an open-source Node.js content management system. Versions up to and including 1.4.2 of the `@apostrophecms/seo` package injects the Google Analytics Tracking ID (`seoGoogleTrackingI… New	CWE-79 Cross-site Scripting	CVE-2026-53608	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

83	6.8	MEDIUM Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the getRedirectURL function in oauth2.go:22-29 constructs t… New	CWE-601 Open Redirect	CVE-2026-53523	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

84	6.5	MEDIUM Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the Nezha dashboard exposes two endpoints that create long-… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-53522	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

85	6.4	MEDIUM Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/{id} accepts and persists nonexistent ddns_p… New	CWE-863 Incorrect Authorization	CVE-2026-53521	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

86	6.5	MEDIUM Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through N… New	CWE-284 Improper Access Control	CVE-2026-53520	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

87	9.1	CRITICAL Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prior to version 2.0.13, fallbackToFrontend in the dashboard's NoRoute handler treats any URL whose raw… New	CWE-22 Path Traversal	CVE-2026-53519	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

88	5.3	MEDIUM Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.0 to before version 2.0.14, private services (`EnableShowInService: false`) are enumer… New	CWE-200 CWE-285 CWE-863 Information Exposure Improper Authorization Incorrect Authorization	CVE-2026-49397	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

89	7.1	HIGH Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results fo… New	CWE-862 Missing Authorization	CVE-2026-48119	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

90	6.4	MEDIUM Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.10, an authenticated Nezha dashboard user can create or updat… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-47268	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm