Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132601 4.3 警告
Network 		MB CONNECT LINE mbCONNECT24
mymbCONNECT24 		MB CONNECT LINE mymbCONNECT24 および mbCONNECT24 における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2020-12527 2021-11-10 12:25 2020-04-30 Show GitHub Exploit DB Packet Storm
132602 7.7 重要
Network 		MB CONNECT LINE mbCONNECT24
mymbCONNECT24 		MB CONNECT LINE mymbCONNECT24 および mbCONNECT24 における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2020-12528 2021-11-10 12:21 2020-04-30 Show GitHub Exploit DB Packet Storm
132603 5.3 警告
Network 		MB CONNECT LINE mbCONNECT24
mymbCONNECT24 		MB CONNECT LINE mymbCONNECT24 および mbCONNECT24 におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2020-12529 2021-11-10 12:17 2020-04-30 Show GitHub Exploit DB Packet Storm
132604 6.1 警告
Network 		MB CONNECT LINE mbCONNECT24
mymbCONNECT24 		MB CONNECT LINE mymbCONNECT24 および mbCONNECT24 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-12530 2021-11-10 12:12 2020-04-30 Show GitHub Exploit DB Packet Storm
132605 6.1 警告
Network 		Saasproject Booking Package - Appointment Booking Calendar System WordPress 用プラグイン Booking Package - Appointment Booking Calendar System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-20840 2021-11-10 12:07 2021-11-10 Show GitHub Exploit DB Packet Storm
132606 9.1 緊急
Network 		Anuko Time Tracker Anuko Time Tracker における不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2021-21352 2021-11-10 12:00 2021-02-28 Show GitHub Exploit DB Packet Storm
132607 9 緊急
Network 		pugjs pug
pug-code-gen 		pug および pug-code-gen におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2021-21353 2021-11-10 11:50 2021-03-1 Show GitHub Exploit DB Packet Storm
132608 8.8 重要
Network 		GitHub GitHub Enterprise GitHub Enterprise Server におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2020-10519 2021-11-10 11:25 2020-03-2 Show GitHub Exploit DB Packet Storm
132609 6.5 警告
Network 		GitHub GitHub Enterprise GitHub Enterprise Server における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-22861 2021-11-10 11:12 2021-03-1 Show GitHub Exploit DB Packet Storm
132610 6.5 警告
Network 		GitHub GitHub Enterprise GitHub Enterprise Server における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2021-22862 2021-11-10 10:57 2021-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
641 3.8 LOW
Local 		- - OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using provider aliases to compare against aliases instead of canonical provider identit… CWE-863
 Incorrect Authorization 		CVE-2026-53809 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
642 8.8 HIGH
Network 		- - OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers with trusted operator … CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-53810 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
643 8.8 HIGH
Network 		- - OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable display name metadata… CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-53811 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
644 7.7 HIGH
Network 		- - OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act in… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-53812 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
645 7.8 HIGH
Local 		- - OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with access to affected wor… CWE-427
 Uncontrolled Search Path Element 		CVE-2026-53813 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
646 8.3 HIGH
Network 		- - OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. Atta… CWE-266
 Incorrect Privilege Assignment 		CVE-2026-53814 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
647 6.5 MEDIUM
Network 		- - OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust callers can request messages from channels not intend… CWE-862
 Missing Authorization 		CVE-2026-53815 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
648 7.2 HIGH
Network 		- - OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system.run authorization.… CWE-862
 Missing Authorization 		CVE-2026-53816 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
649 8.8 HIGH
Network 		- - OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to spoof locality information and obtain durable admin-capable d… CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-53817 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm
650 6.6 MEDIUM
Local 		- - OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attacke… CWE-862
 Missing Authorization 		CVE-2026-53818 2026-06-13 00:58 2026-06-12 Show GitHub Exploit DB Packet Storm