Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
181 7.8 重要
Local
OpenClaw OpenClaw OpenClawにおける制御されていない検索パスの要素に関する脆弱性 New CWE-427
制御されていない検索パスの要素
CVE-2026-45004 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
182 6 警告
Network
OpenClaw OpenClaw OpenClawにおける有効期限後または解放後のリソースの操作に関する脆弱性 New CWE-672
有効期限後または解放後のリソースの操作
CVE-2026-45005 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
183 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト
CVE-2026-45006 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
184 7.5 重要
Network
protobufjs project protobufjs protobufjs projectのprotobufjsにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御
CVE-2026-45740 2026-05-15 10:56 2026-05-13 Show GitHub Exploit DB Packet Storm
185 6.5 警告
Network
Haxx cURL HaxxのcURLにおけるセッション期限に関する脆弱性 New CWE-613
不適切なセッション期限
CVE-2026-5545 2026-05-15 10:56 2026-05-13 Show GitHub Exploit DB Packet Storm
186 7.5 重要
Network
Haxx cURL HaxxのcURLにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-5773 2026-05-15 10:56 2026-05-13 Show GitHub Exploit DB Packet Storm
187 6.5 警告
Network
IBM IBM Verify Identity Access
IBM Verify Identity Access Container
IBM Security Verify Access Container
IBMのSecurity Verify Access等の複数製品における暗号アルゴリズムの使用に関する脆弱性 New CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2026-5926 2026-05-15 10:56 2026-04-23 Show GitHub Exploit DB Packet Storm
188 6.5 警告
Adjacent
ZyXEL WRE6505 ファームウェア ZyXELのWRE6505 ファームウェアにおける過度な認証試行の不適切な制限に関する脆弱性 New CWE-307
過度な認証試行の不適切な制限
CVE-2026-7255 2026-05-15 10:56 2026-05-12 Show GitHub Exploit DB Packet Storm
189 7.5 重要
Network
Open5GS Open5GS Open5GSにおける複数の脆弱性 New CWE-119
CWE-125
CVE-2026-8186 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
190 7.5 重要
Network
Open5GS Open5GS Open5GSにおける複数の脆弱性 New CWE-400
CWE-404
CVE-2026-8187 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312051 5.4 MEDIUM
Network
elementor website_builder The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter of multiple widgets in all versions up to, and in… CWE-79
Cross-site Scripting
CVE-2024-5416 2024-09-26 23:37 2024-09-11 Show GitHub Exploit DB Packet Storm
312052 - - - Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the … - CVE-2024-44678 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
312053 - - - An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module. - CVE-2024-41708 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
312054 - - - OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timin… - CVE-2024-22893 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
312055 8.8 HIGH
Network
themekraft buddyforms The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to privilege escalation in all versions up to… NVD-CWE-noinfo
CVE-2024-8246 2024-09-26 23:00 2024-09-14 Show GitHub Exploit DB Packet Storm
312056 5.5 MEDIUM
Local
apple macos A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of t… CWE-427
 Uncontrolled Search Path Element
CVE-2024-44168 2024-09-26 22:56 2024-09-17 Show GitHub Exploit DB Packet Storm
312057 5.5 MEDIUM
Local
apple macos An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted texture may lead to… CWE-125
Out-of-bounds Read
CVE-2024-44161 2024-09-26 22:56 2024-09-17 Show GitHub Exploit DB Packet Storm
312058 5.5 MEDIUM
Local
apple macos The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A malicious application may be able to access private information. NVD-CWE-noinfo
CVE-2024-44163 2024-09-26 22:55 2024-09-17 Show GitHub Exploit DB Packet Storm
312059 7.1 HIGH
Local
apple macos
ipados
iphone_os
This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to bypass Privacy preferenc… NVD-CWE-noinfo
CVE-2024-44164 2024-09-26 22:54 2024-09-17 Show GitHub Exploit DB Packet Storm
312060 7.5 HIGH
Network
apple macos
iphone_os
ipados
visionos
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Network t… NVD-CWE-noinfo
CVE-2024-44165 2024-09-26 22:53 2024-09-17 Show GitHub Exploit DB Packet Storm