Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1631 4 警告
Local 		OpenClaw OpenClaw OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存 		CVE-2026-41403 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1632 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41404 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1633 7.5 重要
Network 		OpenClaw OpenClaw OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性 CWE-408
不適切な動作順序（早期増幅） 		CVE-2026-41405 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1634 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41406 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1635 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-41407 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1636 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41408 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1637 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41910 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1638 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41911 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1639 7.6 重要
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41912 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
1640 7.5 重要
Network 		FreeBSD FreeBSD FreeBSDにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-4247 2026-05-7 12:29 2026-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312661 5.3 MEDIUM
Network 		overleaf overleaf Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 (or 4.2.7 for the 4.x series) contain a vulnerability that allows an arbitrary lan… CWE-74
Injection 		CVE-2024-45312 2024-09-26 03:37 2024-09-3 Show GitHub Exploit DB Packet Storm
312662 6.0 MEDIUM
Network 		fortinet forticlient_endpoint_management_server A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiClientEMS versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.0 through 6.4.9, 6.2.0 through 6.2.… CWE-22
Path Traversal 		CVE-2024-21753 2024-09-26 03:36 2024-09-11 Show GitHub Exploit DB Packet Storm
312663 5.4 MEDIUM
Network 		overleaf overleaf Overleaf is a web-based collaborative LaTeX editor. When installing Server Pro using the Overleaf Toolkit from before 2024-07-17 or legacy docker-compose.yml from before 2024-08-28, the configuration… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2024-45313 2024-09-26 03:12 2024-09-3 Show GitHub Exploit DB Packet Storm
312664 6.5 MEDIUM
Network 		opendaylight model-driven_service_abstraction_layer In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment. NVD-CWE-noinfo
CVE-2024-46942 2024-09-26 03:08 2024-09-16 Show GitHub Exploit DB Packet Storm
312665 5.4 MEDIUM
Network 		workdo crmgo_saas A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes lead… CWE-79
Cross-site Scripting 		CVE-2024-9030 2024-09-26 03:01 2024-09-20 Show GitHub Exploit DB Packet Storm
312666 9.8 CRITICAL
Network 		cellopoint secure_email_gateway Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing aut… CWE-787
 Out-of-bounds Write 		CVE-2024-9043 2024-09-26 02:54 2024-09-20 Show GitHub Exploit DB Packet Storm
312667 9.8 CRITICAL
Network 		medialibs webo-facto The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it… NVD-CWE-noinfo
CVE-2024-8853 2024-09-26 02:49 2024-09-20 Show GitHub Exploit DB Packet Storm
312668 9.8 CRITICAL
Network 		gematik reference_validator The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons p… CWE-611
XXE 		CVE-2024-46984 2024-09-26 02:49 2024-09-20 Show GitHub Exploit DB Packet Storm
312669 9.8 CRITICAL
Network 		code-projects crud_operation_system A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an unknown function of the file updata.php. The manipulation of the argument sid l… CWE-89
SQL Injection 		CVE-2024-9011 2024-09-26 02:48 2024-09-20 Show GitHub Exploit DB Packet Storm
312670 9.8 CRITICAL
Network 		fabianros online_quiz_site A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the a… CWE-89
SQL Injection 		CVE-2024-9009 2024-09-26 02:46 2024-09-20 Show GitHub Exploit DB Packet Storm