Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6341	6.1	警告 Local	VMware	Spring AI	VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40979	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

6342	6.5	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40980	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

6343	5.3	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41332	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

6344	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-41339	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

6345	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41374	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

6346	4.6	警告 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41398	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

6347	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41399	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

6348	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41400	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

6349	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤って解決された名前や参照の使用に関する脆弱性	CWE-706 誤って解決された名前や参照の使用	CVE-2026-41402	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

6350	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41409	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
681	8.2	HIGH Network	erlang	erlang\/otp erts	Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk. The sctp_parse_error_chu…	CWE-121 Stack-based Buffer Overflow	CVE-2026-49759	2026-06-16 03:24	2026-06-11	Show	GitHub Exploit DB Packet Storm

682	6.5	MEDIUM Network	erlang	erlang\/otp erlang\/ssl	Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inet_tls_dist:check_ip/…	CWE-863 CWE-1025 Incorrect Authorization Comparison Using Wrong Factors	CVE-2026-48860	2026-06-16 03:24	2026-06-11	Show	GitHub Exploit DB Packet Storm

683	5.3	MEDIUM Network	erlang	erlang\/otp erlang\/ssh	Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication. W…	CWE-208 Information Exposure Through Timing Discrepancy	CVE-2026-48859	2026-06-16 03:23	2026-06-11	Show	GitHub Exploit DB Packet Storm

684	6.5	MEDIUM Network	erlang	erlang\/inets erlang\/otp	Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Authorization request…	CWE-601 Open Redirect	CVE-2026-48856	2026-06-16 03:23	2026-06-11	Show	GitHub Exploit DB Packet Storm

685	6.5	MEDIUM Network	erlang	erlang\/otp erlang\/ssh	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery. The SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of…	CWE-200 Information Exposure	CVE-2026-48855	2026-06-16 03:23	2026-06-11	Show	GitHub Exploit DB Packet Storm

686	5.5	MEDIUM Local	erlang	erl_interface erlang\/otp	Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm…	CWE-121 Stack-based Buffer Overflow	CVE-2026-49760	2026-06-16 03:23	2026-06-11	Show	GitHub Exploit DB Packet Storm

687	7.8	HIGH Local	microsoft	pc_manager	Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.	CWE-59 Link Following	CVE-2026-50511	2026-06-16 03:23	2026-06-10	Show	GitHub Exploit DB Packet Storm

688	7.8	HIGH Local	microsoft	pc_manager	Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.	CWE-306 Missing Authentication for Critical Function	CVE-2026-50512	2026-06-16 03:22	2026-06-10	Show	GitHub Exploit DB Packet Storm

689	9.8	CRITICAL Network	-	-	The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditional…	-	CVE-2026-8935	2026-06-16 03:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

690	5.3	MEDIUM Network	-	-	The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that…	-	CVE-2026-8386	2026-06-16 03:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed