Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1281 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41381 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
1282 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-41382 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
1283 8.1 重要
Network
OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-41383 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
1284 7.8 重要
Local
OpenClaw OpenClaw OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性 CWE-15
システム構成または設定の外部制御
CVE-2026-41384 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
1285 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2026-41385 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
1286 9.8 緊急
Network
OpenClaw OpenClaw OpenClawにおける特権 API の不適切な使用に関する脆弱性 CWE-648
特権 API の不適切な使用
CVE-2026-41386 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
1287 6.5 警告
Network
Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-124
CWE-191
CVE-2026-41499 2026-05-7 12:04 2026-04-29 Show GitHub Exploit DB Packet Storm
1288 7.7 重要
Network
getoutline outline getoutlineのoutlineにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-41649 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
1289 7.5 重要
Network
PostgreSQL.org PostgreSQL JDBC ドライバ PostgreSQL.orgのPostgreSQL JDBC ドライバにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-42198 2026-05-7 12:04 2026-04-29 Show GitHub Exploit DB Packet Storm
1290 8.1 重要
Network
FreeBSD FreeBSD FreeBSDにおける引用構文の無害化に関する脆弱性 CWE-149
引用構文の不適切な無害化
CVE-2026-42511 2026-05-7 12:04 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1201 5.5 MEDIUM
Adjacent
- - A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulatio… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8235 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
1202 3.5 LOW
Adjacent
- - A vulnerability was found in Dotouch XproUPF 2.0.0-release-088aa7c4. This impacts the function vlib_worker_loop in the library /usr/xpro/upf/tools/libs/libvlib.so of the component UPF Process. The ma… Update CWE-404
 Improper Resource Shutdown or Release
CVE-2026-8232 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
1203 5.3 MEDIUM
Network
- - A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function pcf_sess_sbi_discover_and_send of the component sm-policies Endpoint. Performing a manipulation result… Update CWE-404
 Improper Resource Shutdown or Release
CVE-2026-8223 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
1204 6.3 MEDIUM
Network
- - A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation … Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8217 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
1205 5.3 MEDIUM
Network
- - A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to resource consumption… Update CWE-400
CWE-404
 Uncontrolled Resource Consumption
 Improper Resource Shutdown or Release
CVE-2026-8187 2026-05-12 01:17 2026-05-9 Show GitHub Exploit DB Packet Storm
1206 5.3 MEDIUM
Network
- - A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the component NF. Performing a manipulation resul… Update CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read
CVE-2026-8186 2026-05-12 01:17 2026-05-9 Show GitHub Exploit DB Packet Storm
1207 2.2 LOW
Local
- - GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a registerQuicConnectionClosePayload optimization, because an application can let syste… Update CWE-441
Confused Deputy
CVE-2026-45182 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
1208 8.8 HIGH
Network
- - AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the currentDirectory request parameter in the Flow.js media upload endpoint (POST /api/station/{station_id}… Update CWE-22
Path Traversal
CVE-2026-42605 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
1209 - - - ArchiveBox is an open source self-hosted web archiving system. In versions 0.8.6rc0 and prior, the /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets merged into the craw… Update CWE-88
Argument Injection
CVE-2026-42601 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
1210 - - - Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to versions 2.11.1-lts, 2.16.0-lts, and 2.17.0, the generated authentication filter … Update CWE-200
Information Exposure
CVE-2026-42333 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm