Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
151 7.5 重要
Network 		Express.js Multer Express.jsのMulterにおける不完全なクリーンアップに関する脆弱性 New CWE-459
不完全なクリーンアップ 		CVE-2026-5038 2026-06-17 15:39 2026-06-15 Show GitHub Exploit DB Packet Storm
152 7.5 重要
Network 		Express.js Multer Express.jsのMulterにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-5079 2026-06-17 15:39 2026-06-15 Show GitHub Exploit DB Packet Storm
153 8.1 重要
Network 		Zoom Video Communications, Inc. Zoom Meeting SDK
Zoom Workplace 		Zoom Video Communications, Inc.のZoom Meeting SDK等の複数製品におけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性 New CWE-939
カスタム URL スキームのハンドラの不適切な認可 		CVE-2026-53408 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
154 6.6 警告
Local 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-53820 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
155 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-53821 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
156 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける複数の脆弱性 New CWE-367
CWE-77
CVE-2026-53822 2026-06-17 15:39 2026-06-12 Show GitHub Exploit DB Packet Storm
157 8.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避 		CVE-2026-53823 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
158 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるセッション期限に関する脆弱性 New CWE-613
不適切なセッション期限 		CVE-2026-53824 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
159 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-53825 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
160 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性 New CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-53826 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255791 6.1 MEDIUM
Network 		socialnetwork_project socialnetwork A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/tem… CWE-79
Cross-site Scripting 		CVE-2017-7390 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255792 6.1 MEDIUM
Network 		openeclass openeclass Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data (meeting_id, user) passed to the 'ope… CWE-79
Cross-site Scripting 		CVE-2017-7389 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255793 6.1 MEDIUM
Network 		wallaceit wallacepos A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data (token) passed to the 'wallacepos-master/myaccount/re… CWE-79
Cross-site Scripting 		CVE-2017-7388 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255794 6.1 MEDIUM
Network 		helpmewatchwho_project helpmewatchwho TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter). CWE-79
Cross-site Scripting 		CVE-2017-7387 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255795 6.1 MEDIUM
Network 		symetrie_project symetrie citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter). CWE-79
Cross-site Scripting 		CVE-2017-7386 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255796 7.8 HIGH
Local 		linux linux_kernel Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring… CWE-476
CWE-416
 NULL Pointer Dereference
 Use After Free 		CVE-2017-7374 2024-11-21 12:31 2017-04-1 Show GitHub Exploit DB Packet Storm
255797 6.1 MEDIUM
Network 		lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack. CWE-79
Cross-site Scripting 		CVE-2017-7363 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm
255798 6.1 MEDIUM
Network 		lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack. CWE-79
Cross-site Scripting 		CVE-2017-7362 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm
255799 6.1 MEDIUM
Network 		lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack. CWE-79
Cross-site Scripting 		CVE-2017-7361 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm
255800 6.1 MEDIUM
Network 		lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack. CWE-79
Cross-site Scripting 		CVE-2017-7360 2024-11-21 12:31 2017-03-31 Show GitHub Exploit DB Packet Storm