Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6041	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-20081	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

6042	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-22761	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

6043	9.1	緊急 Network	GNOME Project	libsoup	GNOME Projectのlibsoupにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-2369	2026-04-30 12:17	2026-03-19	Show	GitHub Exploit DB Packet Storm

6044	9.6	緊急 Network	マイクロソフト	Microsoft Partner Center	Microsoft パートナーセンターの特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24303	2026-04-30 12:17	2026-04-23	Show	GitHub Exploit DB Packet Storm

6045	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24504	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

6046	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24505	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

6047	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-24506	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

6048	8.8	重要 Network	it-novum GmbH	openITCOCKPIT	it-novum GmbHのopenITCOCKPITにおける複数の脆弱性	CWE-20 CWE-78 CWE-78	CVE-2026-24893	2026-04-30 12:16	2026-04-14	Show	GitHub Exploit DB Packet Storm

6049	9.8	緊急 Network	サムスン	escargot	サムスンのescargotにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-25205	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

6050	9.1	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-25206	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351	7.5	HIGH Network	-	-	OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch slash commands that allows authenticated senders to skip allowFrom policy checks. Attackers can invoke s…	CWE-863 Incorrect Authorization	CVE-2026-53834	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

352	7.7	HIGH Local	-	-	OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows authenticated senders to mutate configuration without explicit allowFrom restrictio…	CWE-290 Authentication Bypass by Spoofing	CVE-2026-53833	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

353	7.7	HIGH Local	-	-	OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to the proxy-facing Gate…	CWE-290 Authentication Bypass by Spoofing	CVE-2026-53832	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

354	8.3	HIGH Network	-	-	OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenti…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-53831	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

355	6.5	MEDIUM Network	-	-	OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and Zalo webhook secrets to remain active after secrets.reload. Attackers can explo…	CWE-613 Insufficient Session Expiration	CVE-2026-53830	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

356	8.0	HIGH Network	-	-	OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with…	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-53829	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

357	8.8	HIGH Network	-	-	OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. …	CWE-863 Incorrect Authorization	CVE-2026-53828	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

358	6.5	MEDIUM Network	-	-	OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-controlled metadata to forward action payloads with Gateway credentials to attacke…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-53827	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

359	4.3	MEDIUM Network	-	-	OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes the real workspace path to child prompts. Attackers can exploit this by spawning …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-53826	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

360	6.5	MEDIUM Network	-	-	OpenClaw before 2026.4.7 contains an arbitrary file read vulnerability in the memory-wiki ingest feature that allows authenticated Gateway operators with operator.write scope to read local files outs…	CWE-22 Path Traversal	CVE-2026-53825	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm