Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1031	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-44115	2026-05-11 10:55	2026-05-6	Show	GitHub Exploit DB Packet Storm

1032	8.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-44116	2026-05-11 10:55	2026-05-6	Show	GitHub Exploit DB Packet Storm

1033	5.8	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-44117	2026-05-11 10:55	2026-05-6	Show	GitHub Exploit DB Packet Storm

1034	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-44118	2026-05-11 10:55	2026-05-6	Show	GitHub Exploit DB Packet Storm

1035	7.1	重要 Local	gitpython project	gitpython	gitpython projectのgitpythonにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-44243	2026-05-11 10:55	2026-05-7	Show	GitHub Exploit DB Packet Storm

1036	9.1	緊急 Network	The Tor Project	Tor	The Tor ProjectのTorにおける指定された機能の不適切な提供に関する脆弱性	CWE-684 指定された機能の不適切な提供	CVE-2026-44597	2026-05-11 10:55	2026-05-7	Show	GitHub Exploit DB Packet Storm

1037	5.3	警告 Network	The Tor Project	Tor	The Tor ProjectのTorにおける領域間での誤ったリソース移動に関する脆弱性	CWE-669 領域間での誤ったリソース移動	CVE-2026-44599	2026-05-11 10:55	2026-05-7	Show	GitHub Exploit DB Packet Storm

1038	5.3	警告 Network	The Tor Project	Tor	The Tor ProjectのTorにおける不適切な動作順序に関する脆弱性	CWE-696 不適切な動作順序	CVE-2026-44600	2026-05-11 10:55	2026-05-7	Show	GitHub Exploit DB Packet Storm

1039	9.1	緊急 Network	The Tor Project	Tor	The Tor ProjectのTorにおける境界条件の判定に関する脆弱性	CWE-193 境界条件の判定	CVE-2026-44603	2026-05-11 10:55	2026-05-7	Show	GitHub Exploit DB Packet Storm

1040	5.3	警告 Network	Django Software Foundation	Django	Django Software FoundationのDjangoにおけるレングスパラメーターの不整合による処理に関する脆弱性	CWE-130 レングスパラメーターの不整合による不適切な処理	CVE-2026-5766	2026-05-11 10:55	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1461	10.0	CRITICAL Network	-	-	Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker-build.yml) allows a…	CWE-94 Code Injection	CVE-2026-42298	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1462	6.5	MEDIUM Network	-	-	Postiz is an AI social media scheduling tool. From version 2.16.6 to before version 2.21.7, all SSRF protections added in v2.21.4–v2.21.6 share a fundamental TOCTOU (Time-of-Check-Time-of-Use) vulner…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42346	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1463	8.9	HIGH Network	-	-	Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their ow…	CWE-79 Cross-site Scripting	CVE-2026-42556	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1464	-		-	-	Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P…	CWE-79 Cross-site Scripting	CVE-2026-42794	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1465	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled Gra…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-42793	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1466	-		-	-	Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum…	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-43967	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1467	-		-	-	Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow_sse:event/1 in cowlib guards…	CWE-93 CRLF Injection	CVE-2026-43968	2026-05-14 00:57	2026-05-12	Show	GitHub Exploit DB Packet Storm

1468	-		-	-	Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidated cookie name and value fields. cow_co…	CWE-93 CRLF Injection	CVE-2026-43969	2026-05-14 00:57	2026-05-12	Show	GitHub Exploit DB Packet Storm

1469	-		-	-	Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number …	CWE-400 Uncontrolled Resource Consumption	CVE-2026-7790	2026-05-14 00:57	2026-05-12	Show	GitHub Exploit DB Packet Storm

1470	-		-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel …	CWE-89 SQL Injection	CVE-2026-32687	2026-05-14 00:57	2026-05-13	Show	GitHub Exploit DB Packet Storm