Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6191	9.1	緊急 Network	Froxlor	Froxlor	Froxlorにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41229	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

6192	8.5	重要 Network	Froxlor	Froxlor	FroxlorにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-41230	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

6193	7.5	重要 Network	Froxlor	Froxlor	Froxlorにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41231	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

6194	5	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41232	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

6195	5.4	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41233	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

6196	8.6	重要 Local	OpenClaw	OpenClaw	OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性	CWE-15 システム構成または設定の外部制御	CVE-2026-41294	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

6197	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-41295	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

6198	8.2	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41296	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

6199	7.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41297	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

6200	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41298	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352391	-	viewcvs	viewcvs	Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.	NVD-CWE-Other	CVE-2004-1062	2017-07-11 10:30	2004-12-28	Show	GitHub Exploit DB Packet Storm

352392	-	freebsd	freebsd	The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a…	NVD-CWE-Other	CVE-2004-1066	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352393	-	carnegie_mellon_university redhat ubuntu	cyrus_imap_server fedora_core ubuntu_linux	Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.	NVD-CWE-Other	CVE-2004-1067	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352394	-	linux ubuntu	linux_kernel ubuntu_linux	Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_s…	NVD-CWE-Other	CVE-2004-1069	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352395	-	zwiki	zwiki	Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which …	NVD-CWE-Other	CVE-2004-1075	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352396	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other appl…	NVD-CWE-Other	CVE-2004-1081	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

352397	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, w…	NVD-CWE-Other	CVE-2004-1084	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

352398	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.	NVD-CWE-Other	CVE-2004-1085	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

352399	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.	NVD-CWE-Other	CVE-2004-1086	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

352400	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.	NVD-CWE-Other	CVE-2004-1087	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed