Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133161	5.5	警告 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-39851	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

133162	5.5	警告 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-39850	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

133163	7.8	重要 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における型の取り違えの脆弱性	CWE-843 型の取り違え	CVE-2021-39841	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

133164	7.8	重要 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2021-39840	2021-11-2 16:31	2021-09-14	Show	GitHub Exploit DB Packet Storm

133165	5.5	警告 Local	アドビシステムズ	Adobe Acrobat Adobe Acrobat DC Adobe Acrobat Reader DC	Adobe Reader および Acrobat における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-39860	2021-11-2 16:30	2021-09-14	Show	GitHub Exploit DB Packet Storm

133166	5.7	警告 Network	ownCloud	File Antivirus	files_antivirus コンポーネントにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2020-16144	2021-11-2 15:55	2020-07-31	Show	GitHub Exploit DB Packet Storm

133167	9.8	緊急 Network	OneDev project	OneDev	OneDev における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2021-21243	2021-11-2 15:37	2021-01-12	Show	GitHub Exploit DB Packet Storm

133168	9.8	緊急 Network	OneDev project	OneDev	OneDev におけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2021-21244	2021-11-2 15:35	2021-01-12	Show	GitHub Exploit DB Packet Storm

133169	9.8	緊急 Network	OneDev project	OneDev	OneDev における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2021-21242	2021-11-2 15:32	2021-01-12	Show	GitHub Exploit DB Packet Storm

133170	9.8	緊急 Network	OneDev project	OneDev	OneDev における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2021-21245	2021-11-2 15:30	2021-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1101	9.8	CRITICAL Network	-	-	The iRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credentials to gain adminis…	CWE-798 Use of Hard-coded Credentials	CVE-2026-11849	2026-06-13 01:00	2026-06-12	Show	GitHub Exploit DB Packet Storm

1102	-		-	-	MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable and can be modified b…	CWE-427 Uncontrolled Search Path Element	CVE-2026-11879	2026-06-13 01:00	2026-06-12	Show	GitHub Exploit DB Packet Storm

1103	-		-	-	MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because t…	CWE-427 Uncontrolled Search Path Element	CVE-2026-11967	2026-06-13 01:00	2026-06-12	Show	GitHub Exploit DB Packet Storm

1104	-		-	-	The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login cred…	CWE-257 Storing Passwords in a Recoverable Format	CVE-2026-1836	2026-06-13 01:00	2026-06-12	Show	GitHub Exploit DB Packet Storm

1105	8.8	HIGH Network	-	-	OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. Attackers can exploit this by using combined shell o…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-53806	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1106	8.8	HIGH Network	-	-	OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip commands.allowFrom validation. Attackers can invoke a…	CWE-863 Incorrect Authorization	CVE-2026-53807	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1107	6.5	MEDIUM Network	-	-	OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows agent tool calls to set apply: true despite approvalPolicy: pending configuratio…	CWE-863 Incorrect Authorization	CVE-2026-53808	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1108	3.8	LOW Local	-	-	OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using provider aliases to compare against aliases instead of canonical provider identit…	CWE-863 Incorrect Authorization	CVE-2026-53809	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1109	8.8	HIGH Network	-	-	OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers with trusted operator …	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-53810	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

1110	8.8	HIGH Network	-	-	OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable display name metadata…	CWE-290 Authentication Bypass by Spoofing	CVE-2026-53811	2026-06-13 00:58	2026-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed