Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1161	5	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41232	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

1162	5.4	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41233	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

1163	8.6	重要 Local	OpenClaw	OpenClaw	OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性	CWE-15 システム構成または設定の外部制御	CVE-2026-41294	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

1164	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-41295	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

1165	8.2	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41296	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

1166	7.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41297	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

1167	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41298	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

1168	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-41299	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

1169	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不完全な内部状態の区別に関する脆弱性	CWE-372 不完全な内部状態の区別	CVE-2026-41300	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

1170	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-41301	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313101	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Skip over memory region when node value is NULL In imx_rproc_addr_init() "nph = of_count_phandle_with_args…	CWE-476 NULL Pointer Dereference	CVE-2024-43860	2024-08-23 02:08	2024-08-17	Show	GitHub Exploit DB Packet Storm

313102	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently…	CWE-416 Use After Free	CVE-2024-42302	2024-08-23 01:37	2024-08-17	Show	GitHub Exploit DB Packet Storm

313103	-		-	-	JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.c…	-	CVE-2024-43033	2024-08-23 01:35	2024-08-22	Show	GitHub Exploit DB Packet Storm

313104	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf fo…	CWE-129 Improper Validation of Array Index	CVE-2024-42301	2024-08-23 01:31	2024-08-17	Show	GitHub Exploit DB Packet Storm

313105	-		-	-	memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier where an arbitrary origin is reflected with Access-Control-Allow-Credentials set …	-	CVE-2024-41659	2024-08-23 01:15	2024-08-21	Show	GitHub Exploit DB Packet Storm

313106	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close There appears to be a possible use after free with vdec_close(). The firmware will…	CWE-416 Use After Free	CVE-2024-42313	2024-08-23 01:01	2024-08-17	Show	GitHub Exploit DB Packet Storm

313107	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes In cdv_intel_lvds_get_modes(), the return value of drm_mode_…	CWE-476 NULL Pointer Dereference	CVE-2024-42310	2024-08-23 01:01	2024-08-17	Show	GitHub Exploit DB Packet Storm

313108	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes In psb_intel_lvds_get_modes(), the return value of drm_mode_…	CWE-476 NULL Pointer Dereference	CVE-2024-42309	2024-08-23 01:01	2024-08-17	Show	GitHub Exploit DB Packet Storm

313109	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix div-by-zero in vmpressure_calc_level() evict_folios() uses a second pass to reclaim folios that have gone through p…	CWE-369 Divide By Zero	CVE-2024-42316	2024-08-23 00:52	2024-08-17	Show	GitHub Exploit DB Packet Storm

313110	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential deadlock on __exfat_get_dentry_set When accessing a file with more entries than ES_MAX_ENTRY_NUM, the bh-arr…	CWE-667 Improper Locking	CVE-2024-42315	2024-08-23 00:51	2024-08-17	Show	GitHub Exploit DB Packet Storm